I've been testing out LDAP authentication with several different *NIX OS's. I've run into a difference between HP-UX and Solaris that has me confused. We have some groups that are set up in LDAP, they do not exist in /etc/group. HP-UX and Linux recognize these groups and will work with them (chgrp with one of these groups works). But Solaris 9 doesn't see them at all.

Not sure if there is an option when configuring the system with ldapclient so it will recognize these. I didn't see anything in the MAN page about it.

Anyone else have a similar experience, or possibly a fix for this?

Is your nsswitch.conf configured for ldap groups ?

Good question. I'll have a look at it to see if it is or not. The other thing that I've found is that systems beyond 112960-08 patch on Solaris 9 have "issues" with ldap based groups.

The following lines appear in /etc/nsswitch.conf:

group: files ldap
netgroup: ldap

I would think that the first line would allow the use of LDAP groups. At least the comment directly above this line seems to say this.