Configure keepunixgroups to Retain UNIX GIDs or DOS Attributes

The files created by Advanced Server/9000 may have their gid set to one of the DOS attributes (system, hidden, archive) or the gid in the password file.

The lanman.ini parameter keepunixgroups allows you to retain the UNIX group id field of a file or replace it with the DOS attributes of the file

AS/U administrators can choose to have UNIX group ids by invoking the following command: srvconfig -s "hpparms,keepunixgroups=yes"

By default keepunixgroups is set to no. The default behavior allows replacing UNIX group ids with DOS attributes.

AS/U honors the HP-UX setgid bit on a file or directory's parent directory when the keyword [hpparms]keepunixgroups is set to yes. This allows a group of users to access files and directories based on group memberships.

keepunixgroups may be used in conjunction with the mapuname command to obtain UNIX-like owner and group ids for files and directories.

Example: Entry in the /etc/passwd file userA::500:1000:Unix User A:/home/userA:/sbin/sh

Execute the mapuname command for the AS/U user USERA

mapuname -a hpntcxx_dom:USERA userA

If keepunixgroups is set to yes, then files created by USERA will be listed as follows:

rw-rw-r-- 1 userA 1000 50 Apr 26 10:10 fileA

If keepunixgroups is set to no, then files created by USERA will be listed as follows:

rw-rw-r-- 1 userA DOS-a-- 50 Apr 26 10:10 fileA

However, the group of a file is determined at the time the file is created. After the file has been created, modifying keepunixgroups will have no effect on the group id of a file.

	NOTE: If keepunixgroups is set to yes, the DOS attributes "archive", "system", and "hidden" have no meaning. Hence modifying these attributes has no effect on the attributes. Only the "read-only" attribute is significant.AS/U uses the group field (which contains the DOS attributes) to determine if a directory is an AS/U directory or a UNIX directory. It uses this information to enforce AS/U permissions or UNIX permissions. Another registry value UnixDirectoryCheck exists to determine what level of permission needs to be enforced. If keepunixgroups is set to yes, then UnixDirectoryCheck should be set to 2 in order for AS/U to treat a directory as an AS/U directory rather than a UNIX directory. Please refer to configuration of the UnixDirectoryCheck parameter for more information.