Manual Pages

Table of Contents

NAME

netgroup - network groups data base

SYNOPSIS

/etc/netgroup

DESCRIPTION

netgroup defines network wide groups used for access permission checking during remote mount request processing. Each line defines a group and has the format:

groupname member-list

Each element in member-list is either another group name or a triple of the form:

(hostname, username, domainname)

The hostname entry must be fully qualified if the specified host is not in the local domain.

Since the filer uses netgroups only in /etc/exports (see na_exports(5)), the username entry is ignored. The domain_name field refers to the domain in which the netgroup entry is valid. It must either be empty or be the local domain, otherwise the netgroup entry is ignored. This allows a single /etc/netgroup file to be used for filers in multiple domains.

Filer netgroups are not linked with NIS, as they are in SunOS, so groups must be added to the filer's local netgroup file before they can be used in /etc/exports.

EXAMPLE

This is a typical netgroup file:

trusted_hosts (adminhost,,) (zeus,,) (thor,,) (minerva,,)

untrusted_hosts
(sleepy,,) (dopey,,) (grumpy,,) (sneezy,,)
all_hosts
trusted_hosts untrusted_hosts

With this netgroup file it might make sense to modify /etc/exports to export / on the filer only to trusted_hosts, but to export /home to all_hosts.

FILES

/etc/netgroup
/etc/exports
directories and files exported to NFS clients
/etc/hosts
host name data base

SEE ALSO

na_exportfs(1), na_hosts(5), na_exports(5)

BUGS

The only place that netgroups can be used is in the access= option of the exportfs command (see exportfs(1)) and /etc/exports.

The filer does not support NIS, so in NIS-only environments /etc/netgroup must contain all netgroups used in /etc/exports or by exportfs. Many administrators modify the Makefile for the NIS netgroup map on the NIS server to update netgroup automatically when the NIS map changes:

cp /etc/netgroup /nfs/toaster/etc/netgroup

Table of Contents