The netgroup table defines network wide groups used to check permissions for remote mounts, logins, and shells. The members of net groups used for remote mounts are machines; for remote logins and shells, they are users.
Users working on a client machine being served by an NIS+ server running in compatibility mode cannot run ypcat on the netgroup table. Doing so will give you results as if the table were empty even if it has entries.
The netgroup table has six columns:
Table 23–9 netgroup Table
Column |
Content |
Description |
---|---|---|
Name |
groupname |
The name of the network group |
Group |
groupname |
Another group that is part of this group |
Host |
hostname |
The name of a host |
User |
username |
A user's login name |
Domain |
domainname |
A domain name |
Comment |
Comment |
An optional comment about the entry |
The input file consists of a group name and any number of members:
groupname member-list... |
The member list can contain the names of other net groups or an ordered member list with three fields or both:
member-list::=groupname | (hostname, username, domainname) |
The first field of the member list specifies the name of a machine that belongs to the group. The second field specifies the name of a user that belongs to the group. The third field specifies the domain in which the member specification is valid.
A missing field indicates a wildcard. For example, the netgroup specification shown below includes all machines and users in all domains:
everybody ( , , ) |
A dash in a field is the opposite of a wildcard; it indicates that no machines or users belong to the group. Here are two examples:
(host1, -,doc.com.) (-,joe,doc.com.) |
The first specification includes one machine, host1, in the doc.com. domain, but excludes all users. The second specification includes one user in the doc.com. domain, but excludes all machines.