[comp.sys.apollo] SUMMARY: Can you set uid and guid?

pwo@ztivax.UUCP (Peter W Osel) (03/20/91)

Hi again,
	
The Big QUESTION was:

	Is it possible to change the UIDs and GIDs on HP/APOLLO (running
Aegis 9.7 and 10.x), so that we can use NFS to cross-mount file-systems.

The ANSWER is:

	Yes, you can.

The WINNERS are:

	Ken Van Riper		kvr%beta@lan1.gov
	Jinfu Chen		chen@digital.sps.mot.com
	Willem Jan Withagen	wjw@eb.ele.tue.nl
	Eric Stephenson		eric@hpsanaeo.nsr.hp.com
	Ahmet Ertem		ahmet@hpubhga.gsr.hp.com
	Vince Skahan		vince@atc.boeing.com
	Rich Nelson		rnelson@mot.com

Thank you for your help!  

Now the DETAILS:

>From: kvr%beta%lanl.gov%unido.uucp@ztivax (091398 Van Riper)

On our 9.7 system, we installed NFS to/from SUN network and had to
change the uid s to our division-wide numbering system.  It was so easy
I don't remember exactly, but I believe it was just a matter of editing
/etc/passwd.


>From: wjw%eb.ele.tue.nl%unido.uucp@ztivax (Willem Jan Withagen)

One can change the UNIX uid and gid without any much problems on an
SR9.7 system. After running crpasswd just run /etc/flush_cache and
reboot the systems. (Yes, all SR9.7 systems)

Now the followinng problem is that SR10.x Unix uid are not that easily
changed. There's a change command in edrgy which lets you change the
Unix-id with a name, but it does not say anything about files etc.
which are owned by that user. (On SR9.7 is this fixed by running
flush_cache) You could look it up in Managing BSD software page 9-25 to
9-26.

[pwo] Using the command `find // -user OLD_UID -exec chown NEW_UID {} \;' will
[pwo] do the job! (You only have to take care, that OLD_UID and NEW_UID are unique
[pwo] until you changed all uids.

As for the Sun side, I think you are more involved in this. At our site
(Only one SUN) we just changed the complete SUN /etc/{passwd,group}
files.


From: chen%digital.sps.mot.com%unido.uucp@ztivax (Jinfu Chen)

Do you have a choice to upgrade all Apollos to 10.x? If yes, the
solution is easy. Under 10.x, Unix uid of each person/group can be
changed via /etc/edrgy.  [pwo] that's what we currently do :-)

If you can't upgrade to 10.x, change the Sun side :-(.

Under 10.x, there is a very nice utility called import_passwd which
allows merging passwd files from foreign system. RTFM :-)


From: Eric Stephenson <eric%hpsanaeo.nsr.hp.com%unido.uucp@ztivax>

from your comments about crpasswd you are using 9.7 as master
registry.  make your sr10 the master.  using the sr10 tool
import_passwd you can sync the registry from data in ascii passwd and
group files (edited as you wish prior to importing).  the import_passwd
will let you "favor" the apollo or foreign entries or allow you to
interactively resolve name,uid,gid, account conflicts.  it's especially
useful when multiple nets meet for the first time (apollo and
non-apollo that is), before the mismatched uids get sprinkled
throughout the file system. good luck.


From: Ahmet Ertem <ahmet%hpubhga.gsr.hp.com%unido.uucp@ztivax>

It depends on where your writeable registry resides: sr9 or sr10.

a) on sr9:
- synchronize UNIX ids by editing your passwd and group files
- run cvtrgy -from9to10 -invalidate_unixids
- run crpasswd (from sr9.7_executables directory)
- rerun cvtrgy -from9to10 (without -invalidate_unixids)
- run /etc/syncids on sr10

b) on sr10:
- run import_passwd
- run /etc/syncids
- run cvtrgy -from10to9
- run crpasswd (from /install/tools_sr9 directory)


From: Rich Nelson <rnelson%mot.com%unido.uucp@ztivax>

The commands import_passwd and syncids will aid you in merging foreign
UNIX IDs and making the new (if any) id work on the apollo.
"Administering the Domain/OS Registry" is a helpful book to have around
when attempting this.


From: Vince Skahan <vince%atc.boeing.com%unido.uucp@ztivax>

I'd strongly recommend changing the UIDs/GIDs on the apollo because the
UID/GID string on the apollo means almost nothing.  Each object on the
disk has a unique 32 bit identifier, and the UID/GID's map to *that*.

Get into edrgy and change the unix UID/GID for each person and group to
match your unix ones to catch up... then when you add a user/group, do
it on the unix box and THEN create the corresponding apollo ones.

We had to do 400 users and 50 groups on our internet of 100 apollos and
it took an hour or two...easy to do!

--
>#include <disclaimer.h>
--
Peter W. Osel			Internet:	pwo@ztivax.siemens.com
Siemens AG			EUnet:		pwo%ztivax.uucp@unido.uucp
HL CAD 15			Phone:		+49 (89) 4144-3825
Balanstrasse 73			Fax:		+49 (89) 4144-4009
W-8000 Munich 80
Fed. Rep. of Germany

rees@pisa.citi.umich.edu (Jim Rees) (03/20/91)

In article <4347@ztivax.UUCP>, pwo@ztivax.UUCP (Peter W Osel) writes:

  	Is it possible to change the UIDs and GIDs on HP/APOLLO (running
  Aegis 9.7 and 10.x), so that we can use NFS to cross-mount file-systems.

Some of your correspondents mentioned this, but most did not.  After
changing the Unix ids, you have to synchronize them with the uids.  On sr9.7
and before this is done with 'crpasswd -map' and on sr10 and later with
'syncids'.