Solaris 10 groups


 
Thread Tools Search this Thread
Operating Systems Solaris Solaris 10 groups
# 1  
Old 06-29-2016
Solaris 10 groups

I have a Solaris 10 system inherited from several previous admins. While trying to decipher a permissions issue, I ran "grpck" and it reported a ton of errors. Among them were these:
1. group name too long
2. group name contains illegal characters (special chars or caps)
3. group membership duplicated (for example, the LDAP server contains a group named bosco with user Joe and there is a local group in /etc/group called bosco with user Joe.

While grpck reports these as errors/problems, how serious is it? Should it be fixed immediately? Is it causing problems I can't see? Or does Solaris really only care about the GID and the name attached to that GID is just a convenience for humans? Anyone think of any "gotchas" that could result from fixing the length/characters/etc. in /etc/group or LDAP?
# 2  
Old 06-29-2016
I would consider a minimalist approach. It looks like the old system was using standalone authentication, then LDAP was added. Poorly. If LDAP has foo with group number 111 and /etc/group has foo with 122 it can affect what you see -- tools that show file ownership and permissions or /etc/passwd when changing or adding groups to an account. Like ls, passwd, chown, chgrp, id

Applications generally use the group number NOT the name to resolve file access.
BEFORE you change anything, check to see what a group (using the group number)
is assigned to: file ownership is the important one. If you have sudo also verify that name and its use in /etc/sudoers.

If you want to change anything consider only using groupmod to change the name e.g., from foo to foo1
Do not change the group numbers as a first fix. And consider LDAP as the 'truth' in the choice of names.

Also check all of the applications scripts for hardcoded group names. You will have to rectify those entries when you change the spelling of the group name.
# 3  
Old 06-30-2016
grpck checks for SysV compliance.
The Solaris 10 OS is more tolerant than SysV is, but applications might have problems.
For permissions only the GID matters. While I am in doubt with NFSv4.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Selecting groups

I have a file with contents like host1.domain.com:9090,host2.domain.com:9090,host3.domain.com:9090 I am looking for such an operation so that, the output should be host1.domain.com:9090 host2.domain.com:9090 host3.domain.com:9090 And also, if the number of entries are more, the... (1 Reply)
Discussion started by: anil510
1 Replies

2. Shell Programming and Scripting

Domain and work groups in solaris 10

Hello all, In solaris 10 can we create domains and workgroups like Active directory in windows? If that is possible, can some one please advise the procedure.. (1 Reply)
Discussion started by: bhargav90
1 Replies

3. Solaris

Maximum limit for allocation of groups to a folder in solaris 10

Hi, As per my knowledge, the maximum number of groups that can be allocated to a folder (in Solaris 10) is 16. But I wonder how this rule is applicable to folders which are mounted on NFS which can be accessed by 100s of groups? or is there is a restriction present? I have never handled such a... (5 Replies)
Discussion started by: poga
5 Replies

4. UNIX for Dummies Questions & Answers

Groups

Must I be in a group? I am using Ubuntu and am the only user on my PC. I know how to change groups but do not see a way to not be in a group. Any help would be appreciated. (2 Replies)
Discussion started by: nthepines
2 Replies

5. UNIX for Dummies Questions & Answers

Understanding Groups

Hi cat /etc/group : .... oinstall:x:401: dba:x:400:oracle ... cat /etc/passwd|grep oracle oracle:x:130:401::/home/oracle:/bin/ksh 1. Is that mean that : ORACLE user has OINSTALL as it Primary group and DBA as secondary group ? 2. What is the linux comman to set ORACLE user with... (2 Replies)
Discussion started by: yoavbe
2 Replies

6. HP-UX

Groups access

Hi all, Can someone tell me how I can get around this problem. Basically I use the HP-UX OS and I work with 2 top level directories. /z/group1 /z/group2 these 2 dirs are managed where group1 can only be access by one set of users and group2 another. This is managed by adding the 2... (3 Replies)
Discussion started by: cyberfrog
3 Replies

7. Solaris

groups

1 user in member of 4 groups find file permissions and default group (1 Reply)
Discussion started by: tirupathi
1 Replies

8. Solaris

groups

how to create 1000 users in 1 group (0 Replies)
Discussion started by: tirupathi
0 Replies

9. Solaris

how to assign the rights to groups in solaris

Hi, how to assign the rights(admin,..) to groups . I can create group using groupadd. but i don't know how to assign rights and adding members please tell me how to do that Thank you (2 Replies)
Discussion started by: S_venkatesh
2 Replies

10. AIX

Where are my groups

Hello A couple of weeks ago, I added a user to an AIX 5.3 system. I go to add one today, and it appears that when creating a user in smit, I cannot see any groups. No primary groups No Group set No Admin Groups The /etc/group and etc/secuity/group files seem to be intact. I did... (4 Replies)
Discussion started by: mhenryj
4 Replies
Login or Register to Ask a Question