Print this page
re #11201 nss: need local netgroup implementation

*** 13,30 **** A netgroup defines a network-wide group of hosts and users. Use a netgroup to restrict access to shared NFS filesystems and to restrict remote login and shell access. ! Network groups are stored in a network information service, such as ! LDAP or NIS, not in a local file. This manual page describes the format for a file that is used to supply ! input to a program such as ldapaddent(1M) for LDAP or makedbm(1M) for ! NIS. These programs build maps or tables used by their corresponding ! network information services. Each line of the file defines the name and membership of a network group. The line should have the format: --- 13,31 ---- A netgroup defines a network-wide group of hosts and users. Use a netgroup to restrict access to shared NFS filesystems and to restrict remote login and shell access. ! Network groups are usually stored in network information services, such ! as LDAP, or NIS, but may alternatively be stored in the local ! /etc/netgroup file. The netgroup line of the nsswitch.conf(4) file ! determines which of those sources are used. This manual page describes the format for a file that is used to supply ! input to a program such as ldapaddent(1M) for LDAP, or makedbm(1M) for ! NIS. The same file format is used in the local /etc/netgroup file. Each line of the file defines the name and membership of a network group. The line should have the format:
*** 103,128 **** /etc/netgroup Used by a network information service's utility to construct a map or table that contains netgroup information. For example, ldapaddent(1M) uses /etc/netgroup to construct an LDAP container. - Note that the netgroup information must always be stored in a network - information service, such as LDAP or NIS. The local file is only used - to construct a map or table for the network information service. It is - never consulted directly. - SEE ALSO ldapaddent(1M), makedbm(1M), share_nfs(1M), innetgr(3C), hosts(4), hosts.equiv(4), nsswitch.conf(4), passwd(4), shadow(4) NOTES - netgroup requires a network information service such as LDAP or NIS. - - Applications may make general membership tests using the innetgr() function. See innetgr(3C). Because the "-" character will not match any specific username or --- 104,124 ---- /etc/netgroup Used by a network information service's utility to construct a map or table that contains netgroup information. For example, ldapaddent(1M) uses /etc/netgroup to construct an LDAP container. + Alternatively, the /etc/netgroup file may be used + directly if the files source is specified in + nsswitch.conf(4) for the netgroup database. SEE ALSO ldapaddent(1M), makedbm(1M), share_nfs(1M), innetgr(3C), hosts(4), hosts.equiv(4), nsswitch.conf(4), passwd(4), shadow(4) NOTES Applications may make general membership tests using the innetgr() function. See innetgr(3C). Because the "-" character will not match any specific username or