I.8 System Groups

These are groups in the local Linux system that provide a group ID (gid) to an OES process.

When NSS is installed, some of these groups are moved to eDirectory and LUM enabled. This is done to provide access to NSS data and to keep group IDs the same across multiple servers.

Table I-2 lists the system groups that are used by OES services.

Table I-9 System Group Purposes

System User or Group Name

Associated Service

Purpose

Iprint (POSIX)

iprintgrp (eDirectory)

iPrint

The iPrint daemons use the group ID (gid) of this group to run.

If iPrint is moved to NSS, the iprintgrp group is created in eDirectory.

ncsgroup

NCS

ncsclient is a member of this group.

novell_nogroup

CIMOM

This group is created by CIMOM but is not currently used.

novlxtier

XTier

The XTier daemons use the group id (gid) of this group to run.

Apache (wwwrun) is a group member because it needs XTier socket access.

When NSS is installed on the Linux server, this group is removed from the local system and created in eDirectory. This is required because members of this group must have access to NSS data, and all NSS access is controlled through eDirectory.

server_name-W-SambaUserGroup

Samba (Novell)

All users granted Samba access are originally assigned to this group, which disables SSH access for them on the server. For more information, see The Samba connection:.

shadow

QuickFinder

Used by QuickFinder and other Web services.

www

Apache

Tomcat

QuickFinder

Apache (wwwrun) and tomcat (novlwww) use the group ID (gid) of this group to run.

QuickFinder requires that all users who manage the service (including the eDirectory Admin user) belong to this group.

User novlxsrvd is in the group because it needs access to an Apache domain socket.

When NSS is installed on the Linux server, this group is removed from the local system and created in eDirectory. This is required because members of this group must have access to NSS data, and all NSS access is controlled through eDirectory.