OpenSSH and groups

[Elmar P. Kolkman]

We have a openssh setup here, but for some reason when you login using it, only the primary group is set correctly for the user. The result is that if the user is member of more then one group, he can't access files belonging to its other groups.

Anyone knows if there is an option (configuration or compiletime if there isn't a configuration option) to solve this?

[Steven E. Protter]

pwck
# checks the /etc/passwd file
grpck
# checks the /etc/group file

Also state your version number.

I'm using HP's port of openssh Secure Shell 3.6.1 p2 and am not experienceing this problem.

SEP

[Elmar P. Kolkman]

pwck gives some warnings on non-existent homedirectories and non-alpha character as first character of the login name.

grpck gave some warnings on logins that don't exist, so they have been cleaned up, but it didn't solve the issue.

Ssh versions: 3.7.1p2 for both the daemon and client.

[Jeff Schussele · Accepted solution]

Hi Elmar,

I don't believe this is abnormal. The users need to use the
newgrp grp_name
command to effectively change their group.
Have them use the
id
command before & after to see the change.

Alternative is to use the /etc/logingroup so that they won't have to use newgrp. Do a
man group
for further details.

HTH,
Jeff

[Elmar P. Kolkman]

Thanx. You gave me the golden hint: /etc/logingroup didn't exist!
Making it a symbolic link to /etc/group solved the problem.