search for: netgroups

Hi I have been searching for commands to "debug" netgroup membership. I am using netgroups provided by ldap. I can do a ldap query but it seems a bit unwieldy to do. I have found a package on ubuntu called ng-utils https://launchpad.net/ubuntu/jaunty/+source/ng-utils/0.7-1 which does what I require and compiles very easily. It contains two commands netgroup and innetgr to query netgroup...

G'day, I figured some others might benefit from this patch. It allows you to use the samba style @netgroup names in hosts allow and hosts deny. I've tested it on solaris and linux with no apparent problems.. I'll get rid of the static string in a couple of days when I have to worry about trying to get this into prod .. but with any luck someone else may have done that for me.. :)

Hello, Has anyone got netgroups working with Samba 3.0.14a where the netgroups are stored in the LDAP directory? I'm using Solaris 9 and SUN's directory server v5.2. What I'm seeing is that samba goes through the motions of looking up a host in a netgroup, but no query is seen by the LDAP server or on the network and...

Hello, I added the support for netgroups to be used in the AllowUsers and DenyUsers parameters. This has some advantages: * hostnames or ip addresses need not to be written or maintained in the sshd_config file, but can be kept abstract names what also simplifies a bit largescale openssh installations * sshd_config needs not change...

Hello, I have attached a small patch that enables OpenSSH 4.7p1 to use netgroups for users and hosts entries in the AllowUsers and DenyUsers configuration options in sshd_config. This has the following advantages: * hostnames or ip addresses don't have to be maintained in sshd_config, but you can use meaningful names for groups of users and groups of hosts. * large scale...

http://bugzilla.mindrot.org/show_bug.cgi?id=212 ------- Additional Comments From Michael.Gerdts at alcatel.com 2002-04-11 00:33 ------- This patch also changes the behavior of ssh-keyscan when a hostname does not resolve. I have changed the condition from fatal() to error() so that the scan does not quit when it runs across a bad hostname. ------- You are receiving this mail because:

Hello; Sorry for the crosspost/repost, but I am getting desparate here. I am having difficulties setting up ssh (ossh4.3p2 - NIS -Solaris8/Sparc) to authenticate and allow ossh access based on NIS netgroup. So, users and/or host should be from a valid netgroup triple, contained within the ossh servers .rhosts, .shosts, hosts.equiv and/or shosts.equiv. I am having alot of trouble getting NIS

innetgr.. much easier.. Had a look for the user section but didn't find it in my 15 seconds of looking.. --- access.c 2003-07-30 16:12:27.000000000 +1000 +++ ../rsync-2.6.0-Linux/access.c 2004-02-01 23:21:12.000000000 +1100 @@ -22,10 +22,21 @@ */ #include "rsync.h" +#include <netdb.h> static int match_hostname(char *host, char *tok) { + char

Hi, I have some problems using netgroups with samba, at the moment I'm using the debian-package with Version samba-2.2.3a-6 on a debian testing system. The problem is that samba checks for wrong host-name in the nis-database here is my snippet of the smb.conf to have a exchange partition: --------smb.conf [export] path = /Mir...

Hello, I'm in the process of migrating from Samba 2.2.8a to 3.0.14a and also changing from NIS to LDAP. I've installed and populated SUN's Directory Server v5.2 and added the required schema extensions and imported some accounts for testing with Samba. Previously I used a NIS netgroup in the hosts allow clause, of the form @hosts_smb and this worked when the samba server system was

Hi, I am just fiddeling with 2.2.0 final. I am having trouble with the config files I used with 2.2.0alpha3: check_access: no hostnames in host allow/deny list. [2001/04/18 12:33:37, 3] smbd/server.c:exit_server(473) Server exit (connection denied) [2001/04/18 12:33:37, 5] lib/access.c:string_match(89) looking for 131.234.166.51 of domain hni in netgroup hni_hosts gave No [2001/04/18

Hi, In my puppet configuration, to deploy certain files to group of nodes, everytime either a new class of node is being used or the node class has to typically extended to many other machines and is likely more typing. The more typing can generally result in anomalies/errors in hosts. For example: node x1.y.z x2.y.z x3.y.z x4.y.z{ ... ... } What I am trying to formulate this into is use

...PAM-enabled [DO I NEED IT?] - NIS -Solaris8/Sparc) to authenticate and allow users passwordless entry based solely on a user, or the host that they are on, being on a valid list of netgroup user/and/or/hosts contained in the server hosts .shosts or shosts.equiv. I assume that I am unable to add netgroups within the AllowGroup and/or DenyGroup? Authentication is already setup properly this way for rsh, rsh denies users based on their host and/or user, all from NIS and depending what is contained within /etc/hosts.equiv and/or /.rhosts. What I wish to do is to duplicate this within ossh. I am h...

...ess to the system to only root and the accounts in the mynetgroup netgroup; however, anyone NIS account is still able to login. It appears that the access.conf is being ignored completely, so I'm thinking there's something I'm missing. How can I restrict access to a system based on NIS netgroups? Thanks! --- Mike VanHorn Senior Computer Systems Administrator College of Engineering and Computer Science Wright State University 265 Russ Engineering Center 937-775-5157 michael.vanhorn at wright.edu http://www.engineering.wright.edu/~mvanhorn/

...p one of the samba servers as the WINS server, 4. setting up all other machines to point to the WINS server. All of the above was done for a netgroup called "WORKGROUP". Everything was working. I was able to browse all the WORKGROUP names from all subnets. Now somebody want to add a few netgroups (say, WG1, WG2). They also span subnets. Our current WINS server only handles WORKGROUP names. I know that if I setup one WINS server for each netgroup, I should be all set. But my question is if it's possible to still use the one WINS server for all of the netgroups. This will save me a lot...

...@netgroup When I try this I am asked for a username/password even though the share has: public=yes If I limit the hosts to specific hosts i.e.: hosts allow = hostname1, hostname2 This works fine (i.e. no password required - access from only the specified hosts), is there a problem with using netgroups? Thanks Andy Andy.Barsby@tectonic.co.uk

Dear all, We're using LDAP for user, group and netgroup information. Obviously, samba does not care about /etc/nsswitch.conf when it comes to netgroups and heads for NIS directly, which is what the manpage of smb.conf correctly states. Is there a way to make samba retrieve the netgroup information from LDAP instead of NIS? In case that way is to implement it, may I post this as a feature request? ;) TIA Regards, Marc

Hi, I''d like to maintain netgroup entries in the /etc/passwd, /etc/shadow files to allow all unix admins loging access and default setup nologin for every non-authorized user. +@unixoperators:x::::: +:x:::::/opt/script/nologin I saw a thread about this online, but not a definitive resolution - not sure if the user resource type is the right way to implement this currently or to try to

http://bugzilla.mindrot.org/show_bug.cgi?id=1018 Summary: Incorrect parsing of hosts.equiv for netgroups Product: Portable OpenSSH Version: -current Platform: All URL: http://marc.theaimsgroup.com/?l=openssh-unix- dev&m=110909300030444&w=2 OS/Version: All Status: NEW Severity: normal Prio...

http://bugzilla.mindrot.org/show_bug.cgi?id=212 Summary: Add netgroup support to ssh-keyscan Product: Portable OpenSSH Version: 3.1p1 Platform: All OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: Miscellaneous AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: