Syntax
int ingroup ( string user, string group )
Description
ingroup returns true if the specified user is in the specified UNIX group on the policy server; otherwise returns false.
Example
if (ingroup("cory", "admin") ) { accept; }
int ingroup ( string user, string group )
ingroup returns true if the specified user is in the specified UNIX group on the policy server; otherwise returns false.
if (ingroup("cory", "admin") ) { accept; }
int innetgroup ( string netgroup, string host )
innetgroup returns true if the specified host is in the specified NIS netgroup on the policy server; otherwise returns false.
if ( ! innetgroup("submithosts", submithost)) { reject "You are not permitted to submit a command from this host"; }
int innetuser (string netgroup, string user)
innetuser returns true if the specified user is in the specified NIS netgroup on the policy server; otherwise returns false.
if ( ! innetuser("submitusers", user)) { reject "You are not permitted to submit a command from this host"; }
int lineno( )
lineno returns the current line number in the policy file.
printf("TRACE: user:%s, cmd:%s, lineno:%d\n", user, command, lineno());
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy