NFS Services Administrator's Guide

Configuring and Administering NIS+
Administering NIS+
Chapter 5234
To Change the Permissions for NIS+ Objects
• To change the permissions of an NIS+ directory, table, table entry,
group, or link, issue the nischmod command from an NIS+ client
host.
The following example changes the permissions for the group table
in the Wiz.Com. domain. It gives user nobody no permissions, owner
and group owner full permissions, and world read permission only.
nischmod n=,og=rmcd,w=r group.org_dir.Wiz.Com.
The following example gives user nobody read permission for the
groups_dir directory in the default domain and takes away modify,
create, and destroy permission from the group owner:
nischmod n+r,g-mcd groups_dir
• To change permissions for a table column, use the nistbladm -u
command.
The following example changes the permissions on the passwd
column of the passwd table in the default domain. It gives nobody,
group, and world no permissions and takes away create and destroy
permissions from the owner.
nistbladm -u passwd=ngw=,o-cd passwd.org_dir
In order to change the permissions for an NIS+ object, you need modify
permission for that object.
You can use SAM (System Administration Manager) to change the
permissions for groups, tables, table entries, and table columns. To run
SAM type sam at the HP-UX prompt. For more information, type man 1M
sam.
The actual permissions for an entry or column are the entry or column
permissions plus the permissions for the table. For example, if the
passwd table has permissions ----rmcdrmcd----, and the passwd
column of the passwd table has permissions r---------------, the
actual permissions for the passwd column are r---rmcdrmcd----.
NOTE The cred table must allow read permission to user nobody in order for
NIS+ to start up.