NFS Services Administrator's Guide

Configuring and Administering NIS+
Setting Up the NIS+ Namespace
Chapter 5 219
To Add Administrators to the NIS+ admin Group
Follow this procedure to add administrators to the NIS+ admin group, or
use SAM (System Administration Manager). To run SAM type sam at the
HP-UX prompt. For more information, type man 1M sam.
1. Type the following command to add NIS+ principals to the admin
group:
nisgrpadm -a admin.domainname NIS+_principal
[NIS+_principal ...]
For example, to add users ming and sara to the admin group in the
Wiz.Com. domain, you would type the following command:
nisgrpadm -a admin.Wiz.Com. ming.Wiz.Com. sara.Wiz.Com.
2. Issue the following command to list the members of the admin group
to make sure the administrators you added are there:
nisgrpadm -l admin.Wiz.Com.
The members of the NIS+ admin group may make any modifications to
the NIS+ objects in the domain that the group owner is allowed to make.
See “NIS+ Authentication and Authorization” on page 208 for an
explanation of NIS+ permissions.
It is useful to add non-root users to the admin group, because they can
administer the domain while logged into any host in the namespace.
Root users must be logged in as root to a specific host in order to be
recognized as members of the admin group.
The admin group is an NIS+ group stored in the groups_dir
subdirectory of the domain directory. It is not one of the HP-UX groups
stored in the /etc/group file or the NIS+ group table.
For more information, type man 1M nisgrpadm or man 1 nis at the
HP-UX prompt.