Groups

[Junhao]

Dear Jeff,

I don't think there's a difference managing a user on mixed 
authentication schemes. The priority is in /etc/nsswitch.conf, all 
schemes providing a users groups are defined there.

# add new group, and user. Note: user has to logout or login to new 
group (man newgrp) to register his updated group membership.
root$ groupadd newgroup
root$ gpasswd -a username newgroup

# check user username is in newgroup
root$ getent group username
(alternative) root# id username

# change permission of folder for new group
root$ chgrp newgroup /folder
root$ chmod g=rx /folder

Junhao

On 10/07/2010 01:44 AM, Jeff Poling wrote:
> Fabio,
>
> The group is not in LDAP but the user is.  The group is one I created on
> the system itself.  Basically, I am trying to give the user access to a
> folder without giving him root access.
>
> Thanks,
>
> Jeff
>
> *Jeffrey Poling*
>
> *System Administrator | Information Systems*
>
> Moody Bible Institute
>
> 820 N. LaSalle Blvd., Chicago, IL 60610
>
> 312-329-8968
>
> www.moodyministries.net <http://www.moodyministries.net>
>
>  From the Word. To Life.
>
> *From:* redhat-sysadmin-list-bounces at redhat.com
> [mailto:redhat-sysadmin-list-bounces at redhat.com] *On Behalf Of *Fabio
> Rampazzo Mathias
> *Sent:* Wednesday, October 06, 2010 11:34 AM
> *To:* redhat-sysadmin-list at redhat.com
> *Subject:* Re: Groups
>
> Jeff,
>
> You can use smbldap-tools and type :
>
>     # smbldap-groupmod -m <user> <group>
>
> Or, if you don't use this tool, just add as an attribute of your group
> in LDAP base :
>
>     memberUid: <user>
>
> If you do not use any tool to manage LDAP, you can insert these content
> on a file :
>
>     dn: <full DN of group>
>
>     changetype: modify
>
>     add: memberUid
>
>     memberUid: <user>
>
> and then, run the following line :
>
>     # ldapmodify -D "<admin DN>" -W -x -f <file>
>
> A great tool for managing LDAP can be found here :
> http://www.novell.com/coolsolutions/tools/13765.html
>
> Cheers,
>
> Fábio Rampazzo Mathias
>
> On Wed, Oct 6, 2010 at 10:25 AM, Jeff Poling <jpoling at moody.edu
> <mailto:jpoling at moody.edu>> wrote:
>
> I just took over our Linux environment and need some assistance with
> groups. Our users authenticate via LDAP and I need to add a user to a
> new group I created. How do I add an LDAP user to a group on a single
> system?
>
> Thanks,
>
> Jeff
>
>
> --
> redhat-sysadmin-list mailing list
> redhat-sysadmin-list at redhat.com <mailto:redhat-sysadmin-list at redhat.com>
> https://www.redhat.com/mailman/listinfo/redhat-sysadmin-list
>
>
>
> --
> redhat-sysadmin-list mailing list
> redhat-sysadmin-list at redhat.com
> https://www.redhat.com/mailman/listinfo/redhat-sysadmin-list