Return
-
Title
Getent search withonly returns results if groups are already cached -
Description
The getent group <gid> operating system command only returns results if the groups are already cached. -
Cause
If the command is run as getent group <groupname> for a group that isn’t in the local cache, it reaches out to AD and pulls the group name and gidNumber.
If we use getent group <gid> for a group that isn’t in the cache, it doesn’t return results.
Examples:getent by gid does not return value but doing by groupname it does return vale
[root@linx ~]# getent group 1407072020 <-- nothing returned [root@linx ~]# getent group rgroup <-- works rgroup:VAS:1407072020:
The SAS equivalent commands are these:
[root@linx ~]# vastool nss getgrgid <gid> [root@linx ~]# vastool nss getgrnam <groupname>
Testing the same examples as the ones used for getent returns same results:
[root@linx ~]# vastool nss getgrgid 1407072020 ERROR: Could not look up group for gid 1407072020: Not found. [root@linx ~]# vastool nss getgrnam rgroup rgroup:VAS:1407072020:
-
Resolution
This an expected behavior, because SAS assumes all groups should already be cached or picked up next incremental update.
The only exception is a user's primary GID, if not cached we will attempt to find it since on AIX is MUST resolve to log in,