Carl Lowenstein wrote:
On Wed, Jul 16, 2008 at 7:07 AM, Marieke Thayer <[EMAIL PROTECTED]> wrote:

Carl Lowenstein wrote:
In fact, by experiment, the only group that I belong to that I can
successfully "newgrp" to is "staff" which has no entry in
/etc/gshadow.   So I don't understand.  And this is wandering far from
newbie territory.

In my opinion it doesn't wander too far. Newbies need to learn about groups
and we can sort how far along the discussion we follow. If you curtail the
discussion too much, we won't learn much. Besides now I know that
/etc/gshadow exists and might be more inclined to look it up in the future.

This morning's experimental results.

1) There is no way to delete a group with the GUI.  So $sudo
/usr/sbin/vigr is the only way.

2) There is some interaction between the GUI User and Group Manager
and group properties that I don't understand.  There is something
going on besides what can been seen in /etc/group and /etc/gshadow.

If I create another group by editing /etc/group, and make myself a
member of it, newgrp lets me in.

If I make myself a member of an existing (came with the system) group
by editing /etc/group, then newgrp won't let me in.  But if I unjoin
the group using the GUI and then join it again, newgrp works as
expected.

This is starting to sound like PAM (Pluggable Authentication Module) issues. The whole PAM system is rather arcane and I'm not sure where it ties in. I do know that login is actually a PAM thing and not a direct check of /etc/passwd and /etc/group with related files like shadow.

Gus

--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-newbie

Reply via email to