topic groupadd not unique in Operating System - HP-UX

groupadd not unique

jackie baron_1 — Fri, 09 Sep 2011 10:03:07 GMT

I want to add several users and several groups to a HPUX 11.31 box. When I type groupadd -g GID <name>, I'm told GID is not unique....even thoug it doesn't exist in the /etc/group file. I read in the man pages about NIS but I don't think we are using NIS....well we are using LDAP, but can I still add these groups locally that may not be unique?

Re: groupadd not unique

Dennis Handly — Fri, 09 Sep 2011 11:51:47 GMT

>we are using LDAP, but can I still add these groups locally that may not be unique?

Are the names different for the same IDs? You don't want to do that.

If they are the same, you should leave out the local copy.

Of course you can just use vi on /etc/group.

Re: groupadd not unique

Paul Wasik — Fri, 09 Sep 2011 16:50:49 GMT

check your /etc/nsswitch.conf file. that will tell you how the OS is searching for UIDs and GIDs. it should be something like this (we use vintela servers as the LDAP "product"). in this case, the OS looks to the files for UID, GID affiliation first before looking to LDAP (vas)

passwd: files vas3

group: files vas3

hosts: files [NOTFOUND=continue] dns

you may find that ldap is searched first. files should be first so that local accounts are found locally without getting confused by similar UID/GID in LDAP.

also, check for the existence of the UID/GID in LDAP.... list the users/groups in ldap (not sure how, but vintela has a tool, vastool). maybe you can find what you are confilcting with.

Re: groupadd not unique

jackie baron_1 — Fri, 16 Sep 2011 13:16:50 GMT

Thanks guys....I think I can disable LDAP in order to add them locally. Now how does one do that?

Re: groupadd not unique

James R. Ferguson — Fri, 16 Sep 2011 13:22:29 GMT

@jackie baron_1 wrote:
Thanks guys....I think I can disable LDAP in order to add them locally. Now how does one do that?

Hi:

You sould see the key 'ldap' in your '/etc/nsswitch.conf' file. Delete it to disable its use. Look at the manpages for 'nsswitch.conf(4)' for more information.

Regards!

...JRF...

Re: groupadd not unique

VK2COT — Sun, 18 Sep 2011 07:39:53 GMT

Hello,

Firstly, you can pass the command-line option to groupadd(1M):

-o Allow the gid to be non-unique (that is, a duplicate)

And because groupadd(1M) only adds the group definition into /etc/group file,

there is never a danger to mess with NIS or LDAP... That is the proper weay for you

to use this command.

Secondly, if you really want to remove LDAP entry from the setup,

just edit /etc/nsswitch.conf. Look for line:

group: files ldap ...

Cheers,

VK2COT