nisgrpadm(1) User Commands nisgrpadm(1)
NAME
nisgrpadm - NIS+ group administration command
SYNOPSIS
nisgrpadm -a| -r| -t ] [ -s ] group principal...
nisgrpadm -c| -d| -l [ -M ] [ -s ] group
AVAILABILITY
SUNWnisu
DESCRIPTION
nisgrpadm is used to administer NIS+ groups. This command
administers both groups and the groups' membership lists.
nisgrpadm can create, destroy, or list NIS+ groups. nis-
grpadm can be used to administer a group's membership list.
It can add or delete principals to the group, or test prin-
cipals for membership in the group.
The names of NIS+ groups are syntactically similar to names
of NIS+ objects but they occupy a separate namespace. A
group named "a.b.c.d." is represented by a NIS+ group object
named "a.groups_dir.b.c.d."; the functions described here
all expect the name of the group, not the name of the
corresponding group object.
There are three types of group members:
o An explicit member is just a NIS+ principal-name, for
example "wickedwitch.west.oz."
o An implicit ("domain") member, written "*.west.oz.",
means that all principals in the given domain belong to
this member. No other forms of wildcarding are allowed:
"wickedwitch.*.oz." is invalid, as is
"wickedwitch.west.*.". Note that principals in sub-
domains of the given domain are not included.
o A recursive ("group") member, written "@cowards.oz.",
refers to another group; all principals that belong to
that group are considered to belong here.
Any member may be made negative by prefixing it with a minus
sign (' - '). A group may thus contain explicit, implicit,
recursive, negative explicit, negative implicit, and nega-
tive recursive members.
A principal is considered to belong to a group if it belongs
to at least one non-negative group member of the group and
belongs to no negative group members.
OPTIONS
-a Add the list of NIS+ principals specified to group.
The principal name should be fully qualified.
-c Create group in the NIS+ namespace. The NIS+ group
name should be fully qualified.
-d Destroy (remove) group from the namespace.
-l List the membership list of the specified group. (See
-M.)
-M Master server only. Send the lookup to the master
server of the named data. This guarantees that the
most up to date information is seen at the possible
expense that the master server may be busy. Note that
the -M flag is applicable only with the -l flag.
-r Remove the list of principals specified from group.
The principal name should be fully qualified.
-s Work silently. Results are returned using the exit
status of the command. This status can be translated
into a text string using the niserror(1) command.
-t Display whether the principals specified are members
in group.
EXAMPLES
Administering Groups
This example shows how to create a group in the foo.com.
domain.
example% nisgrpadm -c my_buds.foo.com.
This example shows how to remove the group from the current
domain.
example% nisgrpadm -d freds_group
Administering Members
This example shows how one would add two principals, bob and
betty to the group my_buds.foo.com.
example% nisgrpadm -
a my_buds.foo.com. bob.bar.com. betty.foo.com.
This example shows how to remove betty from freds_group.
example% nisgrpadm -r freds_group betty.foo.com.
ENVIRONMENT
NIS_PATH If this variable is set, and the NIS+
group name is not fully qualified, each
directory specified will be searched until
the group is found (see nisdefaults(1)).
SEE ALSO
nis+(1), nischgrp(1), nisdefaults(1), niserror(1),
nis_groups(3N)
DIAGNOSTICS
NIS_SUCCESS On success, this command returns an exit
status of 0.
NIS_PERMISSION When you do not have the needed access
right to change the group, the command
returns this error.
NIS_NOTFOUND This is returned when the group does not
exist.
NIS_TRYAGAIN This error is returned when the server for
the group's domain is currently check-
pointing or otherwise in a read-only
state. The command should be retried at a
later date.
NIS_MODERROR This error is returned when the group was
modified by someone else during the execu-
tion of the command. Reissue the command
and optionally recheck the group's member-
ship list.
NOTES
Principal names must be fully qualified, whereas groups can
be abbreviated on all operations except create.
SunOS 5.4 Last change: 25 Feb 1993