topic Re: id command only returning 20 groups in Operating System - HP-UX

id command only returning 20 groups

Dale Renton — Wed, 22 Nov 2006 15:57:27 GMT

HP-UX 11.23 Itanium

The following command is only returning a user's first 20 groups. We use ldapux to connect to an openldap server. Any suggestions?

/usr/bin/id -G -n

Thanks

Re: id command only returning 20 groups

Bill Hassell — Wed, 22 Nov 2006 17:01:47 GMT

That's all you can have for HP-UX. See man getconf, or specifically:

getconf NGROUPS_MAX
20

Re: id command only returning 20 groups

Dale Renton — Wed, 22 Nov 2006 17:17:07 GMT

Ok, thanks.

Any suggestions on how I can determine if a user belongs to a certain group? Right now my script does this :

for var in `/usr/bin/id -G -n` ; do
if [ "$var" = "groupname" ]; then
TZ=EST5EDT
export TZ
break
fi
done

Re: id command only returning 20 groups

James R. Ferguson — Wed, 22 Nov 2006 17:23:14 GMT

Hi Dale:

> how I can determine if a user belongs to a certain group?

# groups user

...shows the group(s) to which user belongs. For example:

# groups root
adm bin daemon lp mail other root sys users

See the manpages for 'groups(1)' for more information.

Regards!

...JRF...

Re: id command only returning 20 groups

Dale Renton — Wed, 22 Nov 2006 17:28:33 GMT

Yes, but that only shows me the first 20 groups. The group I want to determine if the user is a member of is the 23rd.

Thanks,
Dale

Re: id command only returning 20 groups

Bill Hassell — Wed, 22 Nov 2006 19:17:27 GMT

For HP-UX, it won't matter. The user may be associated with 23 groups but only the first 20 are meaningful. The user will not have any group rights for the 23rd group (or any group beyond the first 20). If you create a file with 660 permissions, owned by someone else with group = group23, the user (with group23 membership) cannot read or write the file. This is a system wide limitation. Various flavors of Unix have different group membership limitations.

Re: id command only returning 20 groups

Dale Renton — Thu, 23 Nov 2006 08:25:36 GMT

Ok thanks. I guess I will have to move the groups in question up in the list.

Re: id command only returning 20 groups

Dale Renton — Thu, 23 Nov 2006 08:27:22 GMT

closed