Skip Navigation Links | |
Exit Print View | |
System Administration Guide: Naming and Directory Services (NIS+) |
Part I About Naming and Directory Services
Part II NIS+ Setup and Configuration
4. Configuring NIS+ With Scripts
5. Setting Up the NIS+ Root Domain
8. Configuring an NIS+ Non-Root Domain
10. NIS+ Tables and Information
12. Administering NIS+ Credentials
14. Administering Enhanced NIS+ Security Credentials
15. Administering NIS+ Access Rights
Introduction to NIS+ Authorization and Access Rights
NIS+ Authorization Classes - Review
Concatenation of NIS+ Access Rights
How NIS+ Access Rights Are Assigned and Changed
Specifying Different Default Rights in NIS+
Changing Access Rights to an Existing NIS+ Object
NIS+ Table, Column, and Entry Security
NIS+ Table, Column, Entry Example
NIS+ Rights at Different Levels
Where NIS+ Access Rights Are Stored
Viewing an NIS+ Object's Access Rights
How an NIS+ Server Grants Access Rights to Tables
Specifying NIS+ Access Rights in Commands
NIS+ Class, Operator, and Rights Syntax
NIS+ Syntax for Owner and Group
NIS+ Syntax for Objects and Table Entries
Displaying NIS+ Defaults With nisdefaults
Setting NIS+ Default Security Values
Displaying the Value of the NIS+ NIS_DEFAULTS Variable
Resetting the Value of NIS_DEFAULTS
Specifying Non-Default Security Values at Creation Time in NIS+
Changing NIS+ Object and Entry Access Rights
Using nischmod to Add NIS+ Rights
Using nischmod to Remove NIS+ Rights
Specifying Column Access Rights in NIS+
Setting Column Rights When Creating an NIS+ Table
Adding Rights to an Existing NIS+ Table Column
Removing Rights to an NIS+ Table Column
Changing Ownership of NIS+ Objects and Entries
Changing an NIS+ Object Owner With nischown
Changing an NIS+ Table Entry Owner With nischown
16. Administering NIS+ Passwords
18. Administering NIS+ Directories
20. NIS+ Server Use Customization
23. Information in NIS+ Tables
Common NIS+ Namespace Error Messages
The nischgrp command changes the group of one or more objects or table entries. To use it, you must have modify rights to the object or entry. The nischgrp command cannot change the group of a column, since the group assigned to a table's columns is the same as the group assigned to the table. To change a column's group owner, you must change the table's group owner.
To change an object's group, use the following syntax:
nischgrp group object
Where:
group is the fully qualified name of the object's new group.
object is the fully qualified name of the object.
Be sure to append the domain name to both the object name and new group name.
The example below changes the group of the hosts table in the doc.com. domain to admins.doc.com.:
client% nischgrp admins.doc.com. hosts.org_dir.doc.com.
The syntax for changing a table entry's group uses an indexed entry to identify the entry, as shown below (this syntax is fully described in NIS+ Syntax for Objects and Table Entries).
nischgrp new-group [column=value,...],tablename
Where:
new-group is the fully qualified name of the object's new group.
column is the name of the column whose value will identify the particular entry (row) whose group is to be changed.
value is the data value that identified the particular entry (row) whose group is to be changed.
tablename is the fully qualified name of the tables containing the entry whose group is to be changed.
... indicates that you can specify group changes for multiple entries.
Be sure to append the domain name to both the new group name and the table name.
The example below changes the group of an entry in the hosts table of the doc.com. domain to sales.doc.com. The entry is the one whose value in the host name column is virginia.
client% nischgrp sales.doc.com. '[name=virginia],hosts.org_dir.doc.com.'