[Bug 212] Add netgroup support to ssh-keyscan

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Apr 11 03:12:08 EST 2002


http://bugzilla.mindrot.org/show_bug.cgi?id=212





------- Additional Comments From Michael.Gerdts at alcatel.com  2002-04-11 03:12 -------
ypcat netgroup does not give the output in a nice format.  For example, suppose
I have netgroups like the following:

servers  servers_here servers_there

servers_here  (fred,,) (dino,,)
servers_there (barney,,) (bambam,,)

If I then do "ypmatch servers netgroup", I get back "servers_here
servers_there".  I then have to "ypmatch servers_here netgroup; ypmatch
servers_there netgroup", then parse the results "(fred,,) (dino,,) (barney,,)
(bambam,,)" to pull out the server names.  Yuck.

Also, netgroups may not actually exist in NIS.  The NIS LDAP schema (RFC 2037)
and name service switch modules in recent versions of Solaris support netgroups
in LDAP.

If there is resistence to this patch, then perhaps a separate (more unixish)
path to take would be a standalone netgroupcat(1).




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the openssh-unix-dev mailing list