NFS Services Administrator's Guide

Configuring and Administering NIS+
Overview of NIS+
Chapter 5 209
User nobody is the group of all unauthenticated users. If you have no
entry in the cred table, NIS+ identifies you as user nobody and assigns
you a user ID of -2.
The owner of an NIS+ object is typically the NIS+ principal who created
it. However, you can change the owner of an NIS+ object with the
nischown(1) command.
The group is the NIS+ group that owns the object. NIS+ groups are
stored in the groups_dir subdirectory under each domain directory. An
NIS+ domain typically has an admin group consisting of the NIS+
principals who administer the domain. Not every NIS+ object has a
group owner. For more information on NIS+ groups, type man 1
nisgrpadm at the HP-UX prompt.
The world is the group of all authenticated NIS+ principals. If you are
an authenticated NIS+ principal, but you are not the owner of an object,
and you are not a member of the NIS+ group that owns the object, then
you will have whatever access permissions are granted to the world.
Every NIS+ directory has an owner and permissions associated with it.
Every table has an owner and permissions. Entries and columns in a
table have all the permissions the table has, but you can assign more
permissions to an entry or column than the table has. An entry’s owner
and group owner may be different from the owner and group owner of the
table to which the entry belongs.
When an NIS+ object is created, it inherits a default owner and
permissions. Most NIS+ commands have an option for overriding these
defaults. You can also change these defaults. Type man 1 nisdefaults
at the HP-UX prompt for more information. After an NIS+ object has
been created, you can change its owner with the nischown(1) command,
its group owner with the nischgrp(1) command, and its permissions
with the nischmod(1) command.