netgroup(5) [redhat man page]

netgroup(5)						      Linux Reference Manual						       netgroup(5)

NAME

       netgroup - specify network groups

DESCRIPTION

       The  netgroup  file   defines  "netgroups",  which  are sets of (host, user, domain) tuples, used for permission checking when doing remote
       mounts, remote logins and remote shells.

       Each line in the file consists of a netgroup name followed by a by a list of members, where a member is either another netgroup name, or  a
       triple:

	      (host, user, domain)

       where  the  host,  user,  and domain are character strings for the corresponding components. Any of the three fields can be empty, in which
       case it specifies a "wildcard", or may consist of the string "-" to specify "no valid value". The domain field must  either  be	the  local
       domain name or empty for the netgroup entry to be used. This field does not limit the netgroup or provide security. The domain field refers
       to the domain in which the triple is valid, not the domain containing the the trusted host.

       A gateway machine should be listed under all possible hostnames by which it may be recognized:

	      gateway (server,,) (server-sn,,) (server-bb,,)

       The getnetgrent functions should normally be used to access the netgroup database.

FILES

       /etc/netgroup

SEE ALSO

       getnetgrent(3), exports(5), makedbm(8), ypserv(8)

WARNINGS

       The triple (,,domain) allows all users and machines trusted access, and has the same effect as the triple  (,,).  Use  the  host  and  user
       fields of the triple to restrict the access correctly to a specific set of members.

BUGS

       The Linux libc5 does not query the /etc/netgroup file directly, it only querys the NIS server for the groups. So the netgroup database must
       be stored in the form of a hashed dbm database just like the passwd(5) and group(5) databases.

       This manpage mentions getnetgrent(3), but it seems that manpage hasn't been written yet. Since getnetgrent() is part of GNU libc  it  might
       also be that it is documented in info format.

AUTHOR

       Thorsten Kukuk <kukuk@suse.de>

NIS
								     May 1999							       netgroup(5)

GETNETGRENT(3)						   BSD Library Functions Manual 					    GETNETGRENT(3)

NAME

     getnetgrent, innetgr, setnetgrent, endnetgrent -- netgroup database operations

LIBRARY

     Standard C Library (libc, -lc)

SYNOPSIS

     #include <netdb.h>

     int
     getnetgrent(char **host, char **user, char **domain);

     int
     innetgr(const char *netgroup, const char *host, const char *user, const char *domain);

     void
     setnetgrent(const char *netgroup);

     void
     endnetgrent(void);

DESCRIPTION

     These functions operate on the netgroup database file /etc/netgroup which is described in netgroup(5).  The database defines a set of net-
     groups, each made up of one or more triples:

	   (host, user, domain)
     that defines a combination of host, user and domain.  Any of the three fields may be specified as ``wildcards'' that match any string.

     The function getnetgrent() sets the three pointer arguments to the strings of the next member of the current netgroup.  If any of the string
     pointers are (char *)0 that field is considered a wildcard.

     The functions setnetgrent() and endnetgrent() set the current netgroup and terminate the current netgroup respectively.  If setnetgrent() is
     called with a different netgroup than the previous call, an implicit endnetgrent() is implied.  The setnetgrent() function also sets the off-
     set to the first member of the netgroup.

     The function innetgr() searches for a match of all fields within the specified group.  If any of the host, user, or domain arguments are
     (char *)0 those fields will match any string value in the netgroup member.

RETURN VALUES

     The function getnetgrent() returns 0 for ``no more netgroup members'' and 1 otherwise.  The function innetgr() returns 1 for a successful
     match and 0 otherwise.  The functions setnetgrent() and endnetgrent() have no return value.

FILES

     /etc/netgroup  netgroup database file

COMPATIBILITY

     The netgroup members have three string fields to maintain compatibility with other vendor implementations, however it is not obvious what use
     the domain string has within BSD.

SEE ALSO

     netgroup(5)

BUGS

     The function getnetgrent() returns pointers to dynamically allocated data areas that are freed when the function endnetgrent() is called.

BSD
								   June 4, 1993 							       BSD