From owner-freebsd-questions@FreeBSD.ORG Thu Mar 11 23:56:28 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8461D16A4CE for ; Thu, 11 Mar 2004 23:56:28 -0800 (PST) Received: from goblin.sonhosting.net (MKXLIV.dsl.saunalahti.fi [62.142.33.144]) by mx1.FreeBSD.org (Postfix) with ESMTP id 93B6A43D1F for ; Thu, 11 Mar 2004 23:56:27 -0800 (PST) (envelope-from mike@sonhosting.net) Received: from www.sonhosting.net (localhost.sonhosting.net [127.0.0.1]) i2C7uP6x000340 for ; Fri, 12 Mar 2004 09:56:25 +0200 (EET) (envelope-from mike@sonhosting.net) Received: from 137.163.145.226 (SquirrelMail authenticated user mike) by www.sonhosting.net with HTTP; Fri, 12 Mar 2004 09:56:25 +0200 (EET) Message-ID: <12416.137.163.145.226.1079078185.squirrel@www.sonhosting.net> Date: Fri, 12 Mar 2004 09:56:25 +0200 (EET) From: "Ben 'Bend Over' Dover" To: freebsd-questions@freebsd.org User-Agent: SquirrelMail/1.4.1 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 Importance: Normal References: In-Reply-To: Subject: NIS overrides with user groups X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Mar 2004 07:56:28 -0000 The last couple of days I have bin trying to setup a box to authenticate users from a NIS server. With the help of the Handbook pages I've done that and it works. But I can't seem to get to only add users from a specific normal group to the client. According to the 4.9-Release passwd man pages: >Using groups instead of netgroups for NIS overrides >FreeBSD offers the capability to do override matching based on user groups >rather than netgroups. If, for example, an NIS entry is specified as: > +@operator::::::::: >the system will first try to match users against a netgroup called >`operator'. If an `operator' netgroup doesn't exist, the system will try >to match users against the normal `operator' group instead. I understood this to be that if operator isn't a netgroup but normal group this should only add users from the NIS-server that belong to that group. But I can't get it to work! Did I understand this wrong or have someone else experienced this problem? I'd just like to know if this is possible to accomplish or not!