From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Furness Subject: Re: Recursive groups anyone? Date: 14 Sep 2002 08:39:42 +0100 Sender: linux-admin-owner@vger.kernel.org Message-ID: <1031989182.24112.12.camel@Zebra> References: <1031915854.1765.20.camel@Zebra> <9566.194.82.103.138.1031933445.squirrel@jharris.homeip.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <9566.194.82.103.138.1031933445.squirrel@jharris.homeip.net> List-Id: Content-Type: text/plain; charset="us-ascii" To: Jamie Harris Cc: linux-admin@vger.kernel.org Thanks. Hmm, I'll have to do with scripts by the look of things. On Fri, 2002-09-13 at 17:10, Jamie Harris wrote: > > Are you changing their primary > group of adding them to additional groups? How are you checking their > membership? Usinggetent etc or something else? > It was mainly for secondary group changes. I was looking at it very simply: I wanted to be able to give someone rights to a group, and them be able to immediately access the file (eg using cat). But I can't do that, since (as GC explained) the group memberships are attached to the process - so you can't change them externally. I guess I _could_ probably write a script to update the running process (provided it's a shell) but it's only a minor inconvenience - people are usually ok about logging out when they have asked for group membership to be changes. > You might want to look into storing your group information > in another way rather than tradition groups files under NIS. LDAP might > provide you with whatyou're looking for as I imagine you would just query the directory for group > membership. That _might_ be easier to manage, possibly, but I don't now think it'll make any difference to the log out/in thing. Like I say, that's less important. Thanks. P. -- Paul Furness Systems Manager 2+2=5 for extremely large values of 2.