Path: utzoo!utgpu!news-server.csri.toronto.edu!rutgers!gatech!prism!duke!flur
From: flur@duke.gatech.edu (Peter W. Flur)
Newsgroups: comp.unix.admin
Subject: netgroups
Message-ID: <17600@hydra.gatech.EDU>
Date: 27 Nov 90 13:53:44 GMT
Sender: news@prism.gatech.EDU
Distribution: usa
Organization: Computer Engineering Group, Georgia Tech, Atlanta, GA 30332-0250
Lines: 31


Currently, we have a mixed bag of SS1's and 4/110's running either
4.0.3 or 4.1.  There are three YP domains on the subnet, but we would
like to bring that down to just one if possible.  However, we would
like to be able to restrict which group of machines any one person has
access to.  Rather than use the YP domains to do this, as we are now,
we would like to use netgroups.  As an example, let me say that the
group of people p1, p2, p3, and p4 are all in the yp1 domain.  there
are three machines, m1, m2, and m3.  p1 and p2 should only be allowed
to access m1 and m2, which p3 should only be allowed on m3 and p4
should have access to all three machines. 

The host.equiv files all limit access to a list of machines in our
subdomain only. 

I have read the documentation in the Sun manuals, and tried every
combination of +@, -@, etc. in the password files and the host.equiv
files, but have had no success to date.


Can anyone offer any good advice as to how this can/should be
accomplished?

Thanks,
Peter
-----------------------------------------------------------------------
		    Peter Flur, Research Engineer
		   Georgia Institute of Technology
      School of Electrical Engineering, Atlanta, GA  30332-0250
		    E-MAIL: flur@eecom.gatech.edu
			PHONE: (404) 853-9355