`groups <id>` and `ypcat group.byname | grep <id>` does not match

From: Leslie Joshua Wang Kai Boon (rexo@ubergoonz.com)
Date: Mon Nov 17 2003 - 10:44:09 EST


Hi Managers,

recently, we tried to migrate a group of 30 solaris servers into a new
subnet which have a new Solaris 8 NIS master and Solaris 8 NIS slave
installed.

The migration include IP migration and NIS domain migration. All
servers were successfully migrated. But however, upon user acceptance
tests, it was realized that there are some UNIX ids were unable to
access some directories.

The permission denied were because they are no longer in the group
membership. `id -a` or `groups` commands does not show the groups
membership that they are suppose to be in.

However, the ypcat commands shows that they are inside the various
groups.

The /etc/nsswitch.conf have groups configured to consult "files nis".

Does anyone have every experienced such weird problem before?

Also, we have to run the make on NIS master many times on the day of
migration. Will this cause any problem on the NIS client caching the
group information?

Best Regards,
Leslie Joshua Wang
+============================================================+
|::::::/.....| Contacts:
|::():/..()..| Mobile :. (065) - 9632 5410
|::::/__.....| Internet SMS: http://home.singtel.com/msg_center/sms/
|::\___|__/..|
|;;;;;;|,,,,,|
+============================================================+
"Well! I've often seen a cat without a grin," thought Alice ;
"but a grin without a cat! It's the most curious thing I ever saw in
all my life!"
+============================================================+
> DISCLAIMER MESSAGE << EOF
The information contained in this electronic transmission is intended
only for the use of the recipient and may be confidential and
privileged.
Unauthorized use, disclosure or reproduction is not strictly prohibited
or unlawful but is UNETHICAL.

If you have received this electronic transmission in error,
please notify the sender immediately.

Any technical related information provided within this electronic
transmission is provided as with IT-IS basis, and does not represent
any organization that I am affiliated with.

This electronic transmission may provide, links to other internet
sites or resources. However I have no control over such sites and
resources, you acknowledge and agree that I am not responsible for
the availability of such external sites or resources, and does not
endorse and is not responsible or liable for any content, advertising,
products, or other materials on or available from such sites or
resources.
I will not be responsible or liable, directly or indirectly, for
any damage or loss caused or alleged to be caused by or in connection
with use of or reliance on any such content, goods or services
available on or through any such site or resource.
< EOF
+============================================================+
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:29 EDT