id issues on 11i

[Alex Green]

I'm having a problem with 'id' on HPUX 11i and I was wondering if there was
anyone out there that had had some similar problems,

The problem exists when I run 'id' as a user located on NIS. If I make a login
connection as say "user1" onto the 11i server and type 'id', it reports:

uid, gid and groups (secondary groups). However if I type 'id user1' when
logged in as "user1", it only reports:

uid, gid. No Secondary Groups.

It works fine on 11.00 and 10.20, I have tested it on a number of 11i machines
and also 11.00 and 10.20 machines.

Is this known behaviour, or is there a fix for this?

[Clemens van Everdingen]

Hi,

Didn't this thread help you ?

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x95439f5b3d4fd61190030090279cd0f9,00.html

C.

[Emiel van Grinsven]

Hi,

Also check this one:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x96b70bce6f33d6118fff0090279cd0f9,00.html

HTH, Emiel

[Alex Green]

Hi,

No, the other thread didn't help at all. The old trick of the symlink from logingroup to groups didn't change anything.

I am also quite aware of the standard practices of the forums. I hope that as I learn more, I will be able to contribute in a more positive way.

I have searched through the forums for the answer to this problem, and I only came up with the same answer... the symlink.

Hence, why I re-posted again in the sysadm group and I also put a post on comp.sys.hp.hpux.

[Clemens van Everdingen]

Hi Alex,

No problem, but you just had to mention this in the first thread and it would be on top again, and we will try to help you again.

I will try to find something more about the problem.

C.

[Alex Green]

Hi Clemens,

Thats cool, if you need some more feed back from me, I would like to help as much as I can.

Thanks again
AG

[Emiel van Grinsven]

Hi,

it also was a problem on 10.20, this was fixed using patch PHCO_16311. It should be fixed on 11.i atleast ... there is no patch (yet) available. (that i can find)

Will look more and post if I find anything.

Hth, Emiel

[Emiel van Grinsven]

Hi Alex,

In what case do you use the command? Is it possible for you to use the command "groups"?
It should give you the output you are looking for ...

grt, E.

[Emiel van Grinsven]

Alex,

I found it, it's a known issue.

"In 11.00, "id" command looks into logingroup when a non-root
user does an "id nisuser" and thus NIS+ secondary groups are not listed"
I expect the same behaviour from 11.i.

Emiel

[Clemens van Everdingen]

Hi,

As Harry D Brown already mentioned in the first thread, it has to do with behaviour from NIS.

So you have to check the group file on the NIS master, to see if all the users are in there.

C.

[Alex Green]

Ok,

The command is used as part of ClearCase, the command is issued to validate ownership of the files, stored inside ClearCase.

the 'id' and the 'id user1' command issue and operate successfully on 10.20 and 11.00 with NIS. If I still should check the NIS database, what should I look for??

Thanks

[Emiel van Grinsven]

Do you use the command from a Clearcase shell?
There are some problems with this for NIS users.

[Alex Green]

Emiel,

Yes, I am using the clearcase tool from the CLI.

What problems are there with NIS users?

[Emiel van Grinsven · Accepted solution]

Alex,

Take a look at the following:

"clearcase implements it's own version of some commands when running in the
clearcase environment
e.g.
from a normal shell .....
chown file local_user - works
chown file nis_user works

from a clearcase shell .....
chown file local_user - works
chown file nis_user works - FAILS

seen something similar where a + was not at end of passwd or group
should not be needed in NIS + but ......

OK added a + to end of /etc/passwd and /etc/group

from a clearcase shell .....
chown file local_user - works
chown file nis_user works - works"

Any luck with this?

Emiel

[Alex Green]

Thanks...

That seems to of done the trick.

However, I will wait to hear back from the customer before making the final decision.

Thanks everyone for your help.

[Clemens van Everdingen]

Hi,

Alex, due to my daily business I needed to leave you with Emiel, and I have seen he solved the problem for you !
Great work guys !

C.