Re: Recursive groups anyone?

[Paul Furness <paul.furness@vil.ite.mee.com>]

Thanks.

Hmm, I'll have to do with scripts by the look of things.

On Fri, 2002-09-13 at 17:10, Jamie Harris wrote:
> 
> Are you changing their primary
> group of adding them to additional groups?  How are you checking their
> membership?  Usinggetent etc or something else?
> 
It was mainly for secondary group changes. I was looking at it very
simply: I wanted to be able to give someone rights to a group, and them
be able to immediately access the file (eg using cat). 

But I can't do that, since (as GC explained) the group memberships are
attached to the process - so you can't change them externally. I guess I
_could_ probably write a script to update the running process (provided
it's a shell) but it's only a minor inconvenience - people are usually
ok about logging out when they have asked for group membership to be
changes.


> You might want to look into storing your group information
> in another way rather than tradition groups files under NIS.  LDAP might
> provide you with whatyou're looking for as I imagine you would just query the directory for  group
> membership.

That _might_ be easier to manage, possibly, but I don't now think it'll
make any difference to the log out/in thing. Like I say, that's less
important.

Thanks.

P.


-- 
Paul Furness

Systems Manager

2+2=5 for extremely large values of 2.