We were trying to limit the number of regular users who could use xterm or cmdtool for security reasons. A user-defined group was created and admins/non-regulars were assigned to it. Unfortunately, the admins/non-regulars were mysteriously denied xterm/cmdtool execution, which definitely was not the desired effect. Permission denied. That feedback was a bit perplexing because the admins/non-regulars were supposeably assigned to the newly created group per niscat. After a little troubleshooting, it was discovered the newly created group ID matched an existing group’s GID in a different name service database. The GID issue was corrected and xterm worked like a champ.
Building on the last post, I am using the niscat -o flag to display the structure of a common nisplus table. In the example below, the run shows the passwd table and its specific metadata/attribute information. Here is the syntax.
# niscat -o passwd.org_dir Object Name : "passwd" Directory : "org_dir.esofthub.com." Owner : "esoft.esofthub.com." Group : "admin.esofthub.com." Access Rights : ----rmcdrmcdr--- Time to Live : 12:0:0 Creation Time : Sun Feb 24 18:22:47 2008 Mod. Time : Sun Feb 24 18:22:47 2008 Object Type : TABLE Table Type : passwd_tbl Number of Columns : 8 Character Separator : : Search Path : Columns : [0] Name : name Attributes : (SEARCHABLE, TEXTUAL DATA, CASE SENSITIVE) Access Rights : r---r---r---r--- [1] Name : passwd Attributes : (TEXTUAL DATA) Access Rights : ----rm--r---r--- [2] Name : uid Attributes : (SEARCHABLE, TEXTUAL DATA, CASE SENSITIVE) Access Rights : r---r---r---r--- [3] Name : gid Attributes : (TEXTUAL DATA) Access Rights : r---r---r---r--- [4] Name : gcos Attributes : (TEXTUAL DATA) Access Rights : r---rmcdrmcdr--- [5] Name : home Attributes : (TEXTUAL DATA) Access Rights : r---rmcdrmcdr--- [6] Name : shell Attributes : (TEXTUAL DATA) Access Rights : r---rmcdrmcdr--- [7] Name : shadow Attributes : (TEXTUAL DATA) Access Rights : ----------------