NFS Services Administrator's Guide (B1031-90072, March 2011)

You can set user and group IDs in the following methods:
• Using the HP-UX System Files (/etc/passwd and /etc/group)
• Using NIS
• Using LDAP
Using the HP-UX System Files
If you are using the HP-UX system files, add the users and groups to the /etc/passwd and /etc/
group files, respectively. Copy these files to all the systems on the network.
For more information on the /etc/passwd and /etc/group files, see passwd(4) and group(4).
Using NIS
If you are using NIS, all systems on the network request user and group information from the NIS
maps on the NIS server. For more information on configuring NIS, see NIS Administrator's Guide
(5991-2187).
Using LDAP
If you are using LDAP, all systems on the network request user and group information from the
LDAP directory server. For more information on configuring LDAP, see the LDAP-UX Client Services
B.04.00 Administrator’s Guide(J4269-90064).
Verifying Group Restrictions
HP-UX supports 20 group entries per user, but the maximum number of group entries supported
by RPC is 16. If a user is a member of more than 16 groups, NFS truncates the number of entries
to 16 when the user attempts access to files or directories. Use the groups command to find the
group membership of a user. For more information on groups, see groups(1). To ensure that a user
is not a member of more than 16 groups, use the following procedures depending on the user and
group configuration method you use:
• Using the HP-UX System Files
• Using NIS
• Using LDAP
Using the HP-UX System Files
If you are using HP-UX system files to manage your group database, follow these steps:
1. To identify the number of groups that the user belongs to, enter the following command for
each user on your system:
/usr/bin/grep -x -c username /etc/group
This command returns the number of occurrences of username in the /etc/group file.
2. To remove a user from one or more groups, delete the user from the group entries in the /etc/
group file.
Using NIS
If you are using NIS to manage your group database, follow these steps:
1. To identify the number of groups that the user belongs to, enter the following command :
/usr/bin/ypcat -k group | /usr/bin/grep -c username
This command returns the number of occurrences of username in the NIS group map.
2. To remove the user from one or more groups in the NIS map, follow the instructions described
in the NIS Administrator’s Guide (5991-2187).
18 Configuring and Administering NFS Services