groups not updating even though SAM Shows it...

[Todd McDaniel_1]

I have a strange problem...

I added a user to a 2ndary group on 5 N-class boxes. All fairly identical, OS h/w, etc...

On 3 of them it is fine, but on 2 of them, the 2ndary group only shows up in SAM and with the groups command but not with the "id" command...

And the user cant access the files in the other group, so something is very wrong...This is happening on 2 N-class boxes but is fine on all my other boxes...

However, on these 2 boxes it wont update to allow them access no matter how I change the group via /etc/group file or thru SAM tool..


See below...

hostname-root:/root
# id user1
uid=141(user1) gid=265(findev)
hostname-root:/root
# groups user1
findev finsupt

[A. Clay Stephenson · Accepted solution]

Fitrst, I assume that you lave an /etc/logingroup linked to /etc/group.

I suspect that your problem is a stale pwgrd daemon.

/sbin/init.d/pwgr stop

Run your commands now and see if all is well.

You can then restart the daemon, via /sbin/init.d/pwgr start or you may choose to never enable the daemon by disabling it in /etc/rc.config.d. The box will run just fine w/o this daemon.

[Steven E. Protter]

Hard OS limit for a user is 20 broups on 11.11 and 16 on 11.00

Since you are not hitting that , I'd suggest the following commands:

pwck

grpck

The results may lead you to a problem.

SEP

[RAC_1]

How did you add the secondary groups for the user?

Is the user listed in /etc/group for group ids which are secondary groups for user?

Do pwck, grpck.
Do authchk if systems are trusted.

Anil

[Todd McDaniel_1]

My logingroup and group were not linked... that was it.

Although I did kill the pwgr daemon for good measure.

thanks all!

[Bill Hassell]

Sounds like you're not up to date on patches. The requirement for linking logingroup and group disappeared sometime in early 11.00...but it doesn't hurt anything to create the symlink. I prefer symlinks as they are self-documenting. hard links are always a pain to locate.

[Todd McDaniel_1]

Actually, these were 11.0 upgraded to 11i almost 18 months ago and are current on patches... with 3 other boxes which were fine, in this regard.

Not sure what happened to them in not linking logingroup and group.