Manual Pages
Table of Contents
na_netgroup - network groups data base
/etc/netgroup
netgroup defines network wide groups used for access permission
checking during remote mount request processing.
Each line defines a group and has the format:
groupname member-list
Each element in member-list is either another group name
or a triple of the form:
(hostname, username, domainname)
The hostname entry must be fully qualified if the specified
host is not in the local domain.
The filer can also use the netgroup NIS map.
Since the filer uses netgroups only in /etc/exports (see
na_exports(5)), the username entry is ignored. The
domainname field refers to the domain in which the netgroup
entry is valid. It must either be empty, contain a
hyphen or be the local domain, otherwise the netgroup
entry is ignored. A hyphen is equivalent to an empty
entry. This allows a single /etc/netgroup file to be used
for filers in multiple domains.
This is a typical netgroup file:
trusted_hosts (adminhost,,) (zeus,,) (thor,,)
(minerva,,)
- untrusted_hosts
- (sleepy,,) (dopey,,) (grumpy,,)
(sneezy,,)
- all_hosts
- trusted_hosts untrusted_hosts
With this netgroup file it might make sense to modify
/etc/exports to export / on the filer only to
trusted_hosts, but to export /home to all_hosts.
/etc/netgroup
- /etc/exports
- directories and files exported to NFS
clients
- /etc/hosts
- host name data base
na_exportfs(1), na_hosts(5), na_exports(5), na_nis(8)
The only place that netgroups can be used are in the
options of the exportfs command (see exportfs(1)) and
/etc/exports.
Table of Contents