NFS Services Administrator's Guide (B.11.31.05) September 2009

Using the HP-UX System Files
If you are using the HP-UX system files, add the users and groups to the /etc/passwd and
/etc/group files, respectively. Copy these files to all the systems on the network.
For more information on the /etc/passwd and /etc/group files, see passwd(4) and group(4).
Using NIS
If you are using NIS, all systems on the network request user and group information from the
NIS maps on the NIS server. For more information on configuring NIS, see NIS Administrator's
Guide (5991-2187).
Using LDAP
If you are using LDAP, all systems on the network request user and group information from the
LDAP directory server. For more information on configuring LDAP, see the LDAP-UX Client
Services B.04.00 Administrator’s Guide(J4269-90064).
Verifying Group Restrictions
HP-UX supports 20 group entries per user, but the maximum number of group entries supported
by RPC is 16. If a user is a member of more than 16 groups, NFS truncates the number of entries
to 16 when the user attempts access to files or directories. Use the groups command to find the
group membership of a user. For more information on groups, see groups(1). To ensure that a
user is not a member of more than 16 groups, use the following procedures depending on the
user and group configuration method you use:
• Using the HP-UX System Files
• Using NIS
• Using LDAP
Using the HP-UX System Files
If you are using HP-UX system files to manage your group database, follow these steps:
1. To identify the number of groups that the user belongs to, enter the following command for
each user on your system:
/usr/bin/grep -x -c username /etc/group
This command returns the number of occurrences of username in the /etc/group file.
2. To remove a user from one or more groups, delete the user from the group entries in the
/etc/group file.
Using NIS
If you are using NIS to manage your group database, follow these steps:
1. To identify the number of groups that the user belongs to, enter the following command :
/usr/bin/ypcat -k group | /usr/bin/grep -c username
This command returns the number of occurrences of username in the NIS group map.
2. To remove the user from one or more groups in the NIS map, follow the instructions described
in the NIS Administrator’s Guide (5991-2187).
Using LDAP
For more information on managing user profiles using LDAP, see the LDAP-UX Client Services
B.04.00 Administrator’s Guide (J4269-90064).
20 Configuring and Administering NFS Services