Groups members of other groups
 

Is it at all possible to have nested groups, i.e. groups that are members of other groups? I'd like to assign group permissions to a directory, and add groups of users to the group being used for the directory.

/etc/group:
users1:x:500:user1,user2,user3
users2:x:501:user4,user5,user6
resource:x:600:users1,users2

And assigning permissions to the resource:
drwxrwx--- root resource 4096 Jun 19 18:42 directory

and have user1 be able to have rw access to this directory.


Or does it not work this way? Any PAM modules that might do this?

Why not? Did you try it?

Yeah, it breaks good. It seems like the system doesn't want to go the extra step of granting the user access to the 2nd nested supplementary group. In the above example, the system acts like user1 isn't a member of the resource group.

Damn. Then I see no alternative for you except implement Linux ACL...

thank for the reply

even i found it helpful
but when i use setfacl command i get the message
"setfacl:test:function not implemented"

can anyone help me for this....would be thankful

cheerio
ebs

...and *what* exactly are you trying to do? We're extemely low on ESP today.

actually what my problem is that am trying to set the acl entries but am not able to...
when i run the setfacl command with --test option then it shows me the resulting entries but it does not get implemented..
how do i implement it is my prob

i wanna know am i missing upon something,,,,
what has to be taken care of....
if anyone cud help me....for this

willbe thankful...
waiting for the +ve reply

cheerio...
ebs..!!