Hi,
How can you restrict login access on the linux server to only members of a NIS netgroup? What files needs top be modified?

Thanks
Kapil

You need to be more specific so this answer may not apply. All users that need "full" access to the server need a std login. If you have services such as ftp that you want users to have access to, you can disable anonymous login and allow a specific group of users. These users can use /sbin/nologin as their shell which will prevent them from actually login onto the server but still grant them login to services such as ftp.

If this does not answer your question, please provide more detail into what you are trying to accomplish.

an easy way to do this is something like this:

in /etc/passwd,

+@groupname::::::/bin/bash
+::::::/sbin/nologin

NIS users in the netgroup groupname will have their shell be /bin/bash, where all other NIS users will be /sbin/nologin users (you could also do /bin/false, or wherever your "false" or "nologin" happens to reside -- make sure you've got the right path to avoid unpredictable results).

If your users have different shells than just bash, you could also probably go just +@groupname:::::: for them, and just inherit their shell from the NIS server... but the point is to override that shell for non-group members.

1 members found this post helpful.