search for: netgroup

Hi I have been searching for commands to "debug" netgroup membership. I am using netgroups provided by ldap. I can do a ldap query but it seems a bit unwieldy to do. I have found a package on ubuntu called ng-utils https://launchpad.net/ubuntu/jaunty/+source/ng-utils/0.7-1 which does what I require and compiles very easily. It contains two commands netgro...

G'day, I figured some others might benefit from this patch. It allows you to use the samba style @netgroup names in hosts allow and hosts deny. I've tested it on solaris and linux with no apparent problems.. I'll get rid of the static string in a couple of days when I have to worry about trying to get this into prod .. but with any luck someone else may have done that for me.. :) --- access....

Hello, Has anyone got netgroups working with Samba 3.0.14a where the netgroups are stored in the LDAP directory? I'm using Solaris 9 and SUN's directory server v5.2. What I'm seeing is that samba goes through the motions of looking up a host in a netgroup, but no query is seen by the LDAP server or on the network an...

Hello, I added the support for netgroups to be used in the AllowUsers and DenyUsers parameters. This has some advantages: * hostnames or ip addresses need not to be written or maintained in the sshd_config file, but can be kept abstract names what also simplifies a bit largescale openssh installations * sshd_config needs not change...

Hello, I have attached a small patch that enables OpenSSH 4.7p1 to use netgroups for users and hosts entries in the AllowUsers and DenyUsers configuration options in sshd_config. This has the following advantages: * hostnames or ip addresses don't have to be maintained in sshd_config, but you can use meaningful names for groups of users and groups of hosts. * large scal...

http://bugzilla.mindrot.org/show_bug.cgi?id=212 ------- Additional Comments From Michael.Gerdts at alcatel.com 2002-04-11 00:33 ------- This patch also changes the behavior of ssh-keyscan when a hostname does not resolve. I have changed the condition from fatal() to error() so that the scan does not quit when it runs across a bad hostname. ------- You are receiving this mail because:

Hello; Sorry for the crosspost/repost, but I am getting desparate here. I am having difficulties setting up ssh (ossh4.3p2 - NIS -Solaris8/Sparc) to authenticate and allow ossh access based on NIS netgroup. So, users and/or host should be from a valid netgroup triple, contained within the ossh servers .rhosts, .shosts, hosts.equiv and/or shosts.equiv. I am having alot of trouble getting NIS netgroup to work with my current sshd_config, and I've tried just about everything... My environment...

...onds of looking.. --- access.c 2003-07-30 16:12:27.000000000 +1000 +++ ../rsync-2.6.0-Linux/access.c 2004-02-01 23:21:12.000000000 +1100 @@ -22,10 +22,21 @@ */ #include "rsync.h" +#include <netdb.h> static int match_hostname(char *host, char *tok) { + char *netgroup; + + if(strlen(tok)>1){ + if(tok[0]=='@'){ + netgroup=tok+1; + if(innetgr(netgroup, host, NULL, NULL)){ + return(1); + } + } + } if (!host || !*...

Hi, I have some problems using netgroups with samba, at the moment I'm using the debian-package with Version samba-2.2.3a-6 on a debian testing system. The problem is that samba checks for wrong host-name in the nis-database here is my snippet of the smb.conf to have a exchange partition: --------smb.conf [export] path = /Mi...

Hello, I'm in the process of migrating from Samba 2.2.8a to 3.0.14a and also changing from NIS to LDAP. I've installed and populated SUN's Directory Server v5.2 and added the required schema extensions and imported some accounts for testing with Samba. Previously I used a NIS netgroup in the hosts allow clause, of the form @hosts_smb and this worked when the samba server system was still using NIS as its directory. Now that I've converted the samba server to use LDAP as its directory, samba will no longer find hosts in the netgroup. I've inserted the netgroup informatio...

...rouble with the config files I used with 2.2.0alpha3: check_access: no hostnames in host allow/deny list. [2001/04/18 12:33:37, 3] smbd/server.c:exit_server(473) Server exit (connection denied) [2001/04/18 12:33:37, 5] lib/access.c:string_match(89) looking for 131.234.166.51 of domain hni in netgroup hni_hosts gave No [2001/04/18 12:33:37, 0] lib/access.c:check_access(324) Denied connection from (131.234.166.51) [2001/04/18 12:33:37, 1] smbd/process.c:process_smb(824) Connection denied from 131.234.166.51 But testparm says it should be allowed: looking for 131.234.166.51 of domain hni in...

...ass of node is being used or the node class has to typically extended to many other machines and is likely more typing. The more typing can generally result in anomalies/errors in hosts. For example: node x1.y.z x2.y.z x3.y.z x4.y.z{ ... ... } What I am trying to formulate this into is use the netgroup information available from /etc/netgroup and get this grouped as node @xN-y-z-hosts { ... ... } or nodegroup @xN-y-z-hosts { ... ... } What are the things that would possibly require the changes to? Thanks, Nikhil -- You received this message because you are subscribed to the Google Group...

Hello; Forgive me for asking on this list, but I've noticed that their has been some recent changes to the code with regards to netgroup.h, and hoping that someone on this list can help, I've already tried the users list. I am having difficulties setting up ssh (ossh4.3p2 with PAM-enabled [DO I NEED IT?] - NIS -Solaris8/Sparc) to authenticate and allow users passwordless entry based solely on a user, or the host that they ar...

I am using CentOS 5.7. I have an /etc/security/access.conf file which has the following: + : root : LOCAL + : @mynetgroup : ALL - : ALL : ALL I thought this is supposed to restrict access to the system to only root and the accounts in the mynetgroup netgroup; however, anyone NIS account is still able to login. It appears that the access.conf is being ignored completely, so I'm thinking there's something I'...

...network browsing by 1. using Samba servers on each subnet as local browse master, 2. using one of the samba servers as the domain browse masetr, 3. setting up one of the samba servers as the WINS server, 4. setting up all other machines to point to the WINS server. All of the above was done for a netgroup called "WORKGROUP". Everything was working. I was able to browse all the WORKGROUP names from all subnets. Now somebody want to add a few netgroups (say, WG1, WG2). They also span subnets. Our current WINS server only handles WORKGROUP names. I know that if I setup one WINS server for ea...

Hi, I'm trying to limit access to pre-defined set of hosts. I already have a netgroup (in NIS) defined, which I would like to use. Now the man pages for samba say that I can do : hosts allow = @netgroup When I try this I am asked for a username/password even though the share has: public=yes If I limit the hosts to specific hosts i.e.: hosts allow = hostname1, hostname2 This w...

Dear all, We're using LDAP for user, group and netgroup information. Obviously, samba does not care about /etc/nsswitch.conf when it comes to netgroups and heads for NIS directly, which is what the manpage of smb.conf correctly states. Is there a way to make samba retrieve the netgroup information from LDAP instead of NIS? In case that way is to implem...

Hi, I''d like to maintain netgroup entries in the /etc/passwd, /etc/shadow files to allow all unix admins loging access and default setup nologin for every non-authorized user. +@unixoperators:x::::: +:x:::::/opt/script/nologin I saw a thread about this online, but not a definitive resolution - not sure if the user resource type i...

http://bugzilla.mindrot.org/show_bug.cgi?id=1018 Summary: Incorrect parsing of hosts.equiv for netgroups Product: Portable OpenSSH Version: -current Platform: All URL: http://marc.theaimsgroup.com/?l=openssh-unix- dev&m=110909300030444&w=2 OS/Version: All Status: NEW Severity: normal Pri...

http://bugzilla.mindrot.org/show_bug.cgi?id=212 Summary: Add netgroup support to ssh-keyscan Product: Portable OpenSSH Version: 3.1p1 Platform: All OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: Miscellaneous AssignedTo: openssh-unix-dev at mindrot.org...