Howto create nested groups???

Hello Mac fans,
I'm trying to place groups <domain>\schema admins, admins and admin under one group name poweradmins on the mac. I also want to manually map some users to additional groups.
I don't have a Mac network, just a shared PowerMac and a windows AD domain.
I'm familiar with how to do this on any unix distribution. Edit the /etc/groups file and create user mappings to a specific group, in this case poweradmins.
Since I got my mac, I've learned the hard way a few lessons about mac's. First and foremost, the /etc/passwd and /etc/group files are there purely for the end-users's entertainment and are not even consulted during operation. I understand they are used when in runlevel 1, but that would have been a nice tidbit of information to have 4 hours ago....
So I'm learning apple's netinfo database. I prefer CLI, but I'm trying the GUI just to cover all bases.
The long and short is that I can't figure out how to assign users to groups manually. Once I create a group, what do I need to edit to assign a user to that group?
Beyond that, I'm trying to nest a group under a group. I think once I learn how to manually assign users to additional groups, this functionality will become obvious.
Yes I've read the docs. I know how to add attributes to groups and do high-level things with the netinfo db. But I'm unclear about how netinfo is parsed and what elements are mandatory. Perhaps someone reading this list has learned the in's and out's and can share?
Thanks!!

With respect to "NetInfo", I get the impression that things are in a bit of a state of flux - I hear rumours that things are changing in 10.5. For the moment (Tiger), as near as I can tell, users can be added to a group record by including its 'name' in the 'users' property or by 'generateduid' in the 'groupmembers' property. Nested groups can be created by adding a group's 'generateduid' to the enclosing group's 'nestedgroups' property. A command for creating nested groups is discussed here:
http://www.afp548.com/article.php?story=20050810102912104
"Legacy" groups (pre-Tiger, I guess, and lacking a 'generateduid' and who knows what else) can't be added to a nested group.
I find the situation at the moment all very confusing...

Similar Messages

  • How to create Nested Group membership in OAM?

    Hello,
    I am facing a problem now about creating nested group membership in OAM. Although all documents mention that nested group membership is available in OAM and the "uniquemember" attribute's target object class covers both "inetorgperson" and "groupofUniqueNames", I still cannot find the option in Selector to add "group" members.
    Please kindly suggest.
    Thank you.
    Liu Peng

    Liu,
    You've been very helpful, so I thought that I'd try to "return the favor" :)...
    If you want to change the background color of that bar that contains the "Users Groups" to something other than dark blue, you can do it by editting the following file (this path is on Windows):
    C:\Program Files\NetPoint\identity\oblix\lang\shared\sltr_navbar.xsl
    I changed the line:
    <table width="100%" border="0" bgcolor="#006699" cellpadding="0" cellspacing="0">
    TO:
    <table width="100%" border="0" bgcolor="#CCCCCC" cellpadding="0" cellspacing="0">
    which, on my system, changes the bar background color from dark blue to gray.
    Obviously, you can change the color to whatever you feel is appropriate, but the gray background definitely makes the links more visible :)!!
    Here's a website that'll let you experiment with the color codes:
    http://colorcombos.com/combotester.html
    or choose a color visually:
    http://www.liu.edu/cwis/CWP/library/colors.htm
    You'll need to restart the OAM servers after making the change for it to become effective.
    Thanks for your help!
    Jim

  • OAM Nested Groups

    I see how to create nested groups in OAM. However, when looking at the resultant DIT in LDAP, it appears that this creates only a “logical nesting” as the nested group is merely a member of the parent. They are both at the same level in LDAP, under Groups. Is it possible to create truly (physically) nested groups in OAM? The goal is to have groups with the same names as children to parent groups (which have unique names).
    Regards,
    Tom Gresham

    Hi Farbod!
    First of all there are a couple of things to mention:
    a) Using JAAS you will end up with the jazn XML file. There is no LDAP structure in there
    b) The way you describe group 2 is not completely correct. Please check the uniquemember structure of LDAP.
    If you have a group 1 where Ann is a member and a group 2 that has Mary and group 1 as a member your assumption is wrong. Mary and all members of group 1 can see group 2 pages. Group 1 pages can only be seen by Group1 members.
    What you want is the following:
    Group 1: Ann is a member
    Group 2: Mary is a member, Group 1 is a member
    Page for Group 1 can only be seen by Group1 members (meaning Ann).
    Page for Group 2 can be seen by Mary and Group 1 members. Therefore Mary and Ann can see this page.
    cu
    Andreas

  • Howto create a nested group in osx

    Hello Mac fans,
    I'm trying to place groups <domain>\schema admins, admins and admin under one group name poweradmins on the mac. I also want to manually map some users to additional groups.
    I don't have a Mac network, just a shared PowerMac and a windows AD domain.
    I'm familiar with how to do this on any unix distribution. Edit the /etc/groups file and create user mappings to a specific group, in this case poweradmins.
    Since I got my mac, I've learned the hard way a few lessons about mac's. First and foremost, the /etc/passwd and /etc/group files are there purely for the end-users's entertainment and are not even consulted during operation. I understand they are used when in runlevel 1, but that would have been a nice tidbit of information to have 4 hours ago....
    So I'm learning apple's netinfo database. I prefer CLI, but I'm trying the GUI just to cover all bases.
    The long and short is that I can't figure out how to assign users to groups manually. Once I create a group, what do I need to edit to assign a user to that group?
    Beyond that, I'm trying to nest a group under a group. I think once I learn how to manually assign users to additional groups, this functionality will become obvious.
    Yes I've read the docs. I know how to add attributes to groups and do high-level things with the netinfo db. But I'm unclear about how netinfo is parsed and what elements are mandatory. Perhaps someone reading this list has learned the in's and out's and can share?
    Thanks!!

    I have posted under OSX q's, btw.
    Thanks for the reply. I never thought about doing this via AD. That is a very interesting Idea. I would have done it that way w/o even thinking twice if this was a windows PC. But my mindset is unix since it's a mac.
    I'm trying to create a typical scenario of shared folders/directories acessable from multiple users/groups with restrictions. Marketing folks need to see marketing, but the problem is there are 4 or 5 groups relating to this organizational group. Same with other groups. I could make a new super group in AD and apply it to the folder. If Mac is like linux, it will recurse through group membership and allow access if permitted.
    But I still need to learn the mac netinfo database. I'm sure it's not rocket science.. But probably a necessity to know if one is going to be administering Mac's as well as PC's.
    Thanks!!!

  • Nested group function without group xmlagg

    I am getting nested group function without group by xmlagg when using the xmlagg function inside another xmlagg function. Find the table structure and sample data here,
    CREATE TABLE "TEST_TABLE"
       ("KEY" NUMBER(20,0),
        "NAME" VARCHAR2(50 ),
        "DESCRIPTION" VARCHAR2(100 )
       Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (1,'sam','desc1');
       Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (2,'max','desc2');
       Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (3,'peter',null);
       Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (4,'andrew',null);
    select
            XMLSerialize(document
            xmlelement("root",
             xmlagg(
               xmlelement("emp"          
               , xmlforest(Key as "ID")          
               , xmlforest(name as "ename")
               , xmlelement("Descriptions", 
               xmlagg(
                  xmlforest(description as "Desc")
           ) as clob indent
           ) as t   
          from test_table;Then i removed the xmlagg function from the above select query and used xmlelement instead
      select
            XMLSerialize(document
            xmlelement("root",
             xmlagg(
               xmlelement("emp"          
               , xmlforest(Key as "ID")          
               , xmlforest(name as "ename")
               , xmlelement("Descriptions",            
                  xmlforest(description as "Desc")
           ) as clob indent
           ) as t   
          from test_table;This is working fine, but xml created with empty elements for Descriptions element for key 3 and 4 which has null values. I need don't need Descriptions element in the xml when it has null value. Please help me to resolve this.

    You can do it with a correlated subquery :
    SQL> select xmlserialize(document
      2           xmlelement("root",
      3             xmlagg(
      4               xmlelement("emp"
      5               , xmlforest(
      6                   t.key as "ID"
      7                 , t.name as "ename"
      8                 , (
      9                     select xmlagg(
    10                              xmlelement("Desc", d.description)
    11                              order by d.description -- if necessary
    12                            )
    13                     from test_desc d
    14                     where d.key = t.key
    15                   ) as "Descriptions"
    16                 )
    17               )
    18             )
    19           ) as clob indent
    20         )
    21  from test_table t;
    XMLSERIALIZE(DOCUMENTXMLELEMEN
    <root>
      <emp>
        <ID>1</ID>
        <ename>sam</ename>
        <Descriptions>
          <Desc>desc1_1</Desc>
          <Desc>desc1_2</Desc>
          <Desc>desc1_3</Desc>
        </Descriptions>
      </emp>
      <emp>
        <ID>2</ID>
        <ename>max</ename>
        <Descriptions>
          <Desc>desc2_1</Desc>
          <Desc>desc2_2</Desc>
          <Desc>desc2_3</Desc>
        </Descriptions>
      </emp>
      <emp>
        <ID>3</ID>
        <ename>peter</ename>
      </emp>
      <emp>
        <ID>4</ID>
        <ename>andrew</ename>
      </emp>
    </root>
    Or an OUTER JOIN + GROUP-BY :
    select xmlserialize(document
             xmlelement("root",
               xmlagg(
                 xmlelement("emp"          
                 , xmlforest(
                     t.key as "ID"
                   , t.name as "ename"
                   , xmlagg(
                       xmlforest(d.description as "Desc")
                       order by d.description -- if necessary
                     ) as "Descriptions"
             ) as clob indent
    from test_table t
         left outer join test_desc d on d.key = t.key
    group by t.key
           , t.name
    ;Edited by: odie_63 on 11 juil. 2012 14:54 - added 2nd option

  • Photoshop CS5 - Compatibility issue with nested groups

    I'm using Photoshop CS5 to create a multi-layered, group-heavy PSD. The final file is intended for public consumption, so, ideally, I'd like it to be accessible to as many users - and therefore compatible with as many versions of Photoshop - as possible.
    However, I just tried to save the file, and was prompted with this message:
    This document contains nested layer groups that may change in apprearance if opened in applications older than Photoshop CS5.
    Opening the file in CS4 after the save confirmed that a few of the layer groups were indeed corrupt.
    Can anyone shed any light on this?

    It looks like you're the only person so far who's posted that particular message on the web anywhere!
    Out of curiosity, do you have the Maximize PSD and PSB File Compatibility option set to Always in Edit - Preferences - File Handling?
    I have no experience with nested groups, myself, but that setting comes to mind as being involved with the kind of compatibility you're hoping to accomplish.
    I do know that nested group capabilities have been around since at least Photoshop CS2.
    -Noel

  • Creating package groups

    i build a local repository
    this repository includes the packages
    mudkip-3.0.1
    treecko-6.1.0
    torchic-4.2.2
    i want to create a group 'pokemons' such that pacman -S pokemons installs the 3 packages
    link to a howto / short explanation ?
    can a group be included within another group ? (so that you can -S all of the internal group but not the external one alone)

    All you have to do is add the name of the group to the groups array in the PKGBUILD. You can include groups that exist already (e.g. base, xorg).

  • Nested groups with Active Directory AWS

    Hi... am trying to target only specific groups from our AD, but I'd rather not have to use the partial users & groups sync as this would mean re-configuring the auth source for any new group that we want to bring in to the portal (v.5.0.2).
    I am able to target a specific part of AD in the following way:
    User Query Base : OU=Portal Users,DC=Domain1, DC=DOmain2
    User Query Filter: (&(objectclass=user)(memberOf=*))
    Group Query Base : OU=Portal Users,DC=Domain1, DC=DOmain2
    Group Query Filter: (objectclass=Group)
    This works fine, it brings in the groups in the "Portal Users" OU and any users in the OU who have group memberships. However, not all groups and users will exist in a single OU, so we decided to create a global group called "Portal Groups" and tried a similar query as above but with the query base replaced as follows:
    VN=Portal Groups,OU=Applications,DC=Domain1, DC=DOmain2
    This time... the group is brought in but no nested groups and no users! Has anyone else managed to accomplish an AWS setup of this sort or similar? I'm told that it is possible to sync in nested groups but being unfamiliar with AD I'm not sure if I've gone about it the right way.
    thanks in advance
    Simon Dragicevich

    Hi Simon,
    So let me make sure I've got your usecase.  You want to only create particular groups in the portal - you don't want all your AD groups in the portal.  You DO want all your users imported and to have them in the appropriate groups?
    If that's correct - you either want to play with your query bases, or you want to switch to a partial GROUP sync.  The former will allow you to automatically bring in new groups as they are added to AD, the later will not.
    One thing I was confused about in your original post - did you change both the user query base and the group query base to:
    VN=Portal Groups,OU=Applications,DC=Domain1, DC=DOmain2
    or just the group query base?  Assuming you did the former, that would explain why your users weren't imported.  If you did the later - that seems odd.  Regardless you don't want to create a global group, you want to create a new OU:
    OU=Portal Groups, OU=Applications, DC=Domain1, DC=Domain2
    Then set that as your group query base.  Assuming you have a bunch of groups scattered around your tree that you want in here, create shadow groups that essentially contain your other groups, e.g.:
    CN=GroupA, DC=Plumtree
    CN=GroupB, OU=Eng, DC=Plumtree
    I want both of those groups to be in my portal groups OU, so I create two new groups in my portal groups OU as follows:
    CN=GroupA, OU=Portal Groups, OU=Applications, DC=Domain1, DC=Domain2
    CN=GroupB, OU=Portal Groups, OU=Applications, DC=Domain1, DC=Domain2
    Both of these groups simply contain one member - the groups I am shadowing.  You can also more effectively deal with name clashing if you use this strategy.
    Make sense?
    -Aki

  • Nested Group Function without Group By Problem

    Hey everyone,
    I have 3 tables as below:
    TABLES
    ITEM (Item_no, Item_price, desc)
    DeliveryItem (delivery_no, item_no, quantity)
    Delivery (delivery_no, delivery_date)
    SELECT desc, MAX(SUM(quantity)) FROM DeliveryItem, Item, Delivery WHERE Item.item_no = DeliveryItem.item_no AND Delivery.delivery_no = deliveryitem.delivery_no;
    And I'm trying to output description of most delivered item but I got an error like SQL Error: ORA-00978: nested group function without GROUP BY. Could you help me to fix my code?
    Thanx

    Hi,
    DESC is not a good column name; you could get errors if the parser thinks it means DESCending. I used DESCRIPTION instead, below.
    I think the best way is to do the SUM in a sub-query, lkike this:
    WITH     got_r_num     AS
         SELECT       item_no
         ,       SUM (quantity)     AS total_quantity
         ,       RANK () OVER (ORDER BY  SUM (quantity) DESC)     AS r_num
         FROM       deliveryitem
         GROUP BY  item_no
    SELECT     i.description
    ,     r.total_quantity
    FROM     got_r_num     r
    JOIN     item          i     ON     r.item_no     = i.item_no
    WHERE     r.r_num     = 1
    ;If you want to do it without a sub-query:
    SELECT       MIN (i.description) KEEP (DENSE_RANK LAST ORDER BY SUM (di.quantity)
                        AS description
    ,       MAX (SUM (quantity))     AS total_quantity
    FROM       deliveryitem     di
    JOIN       item          i     ON     d1.item_no     = i.tiem_no
    GROUP BY  i.description
    ;If you do nested aggegate functions, then every column in the SELECT clause must be an aggregate applied to either
    (a) another aggregate, or
    (b) one of the GROUP BY expressions.
    That's why you got the ORA-00937 error.
    This second approach will only display one row of output, so If there is a tie for the item with the greatest total_quantity, only one description will be shown. The RANK method will show all items that had the highest total_quantity.
    It looks like the delivery table plays no role in this problem, but it there's some reason for including it, you can join it tpo either query above.
    Of course, unless you post test copies of your tables (CREATE TABLE and INSERT statements) I cn't test anything.
    Edited by: Frank Kulash on Nov 6, 2010 10:57 AM

  • Unwanted nested groups and clipping paths

    Can anyone tell me why when I embed one Illustrator file inside another Illustrator file it creates repeating nested groups with clipping paths? The original file did not have clipping paths or nested groups.

    An Illustrator file has two parts and when placing you just access the wrong part for your purpose. What you want to do is open the other file and then copy/paste.
    See about Illustrator files:
    http://vimeo.com/117691712

  • Does 9iAS support nested groups?

    For examples, our company is a large company which has more than 20 braches, and each branch has subbraches and departments, so when implement the previous intranet, we map all the organization stucture to a nested group system. We enjoy this design, because managing the privileges is a easy task: only grant/revoke permission to/from the group that mirror to a physical organization unit.
    We intend move our next generation intranet to Oracle 9iAS, especially the Poral, but does it support nested groups structure?
    Thanks,
    Hunte

    Work Around:
    On your mac:
    1.  Open a new email
    2.  Insert name of an existing group into one of the "To" fields as usual.
    3.  Highlight all the resulting names in the "To" entry
         [Highlight first name, and while holding shift, highlight last name and all will highlight[]
    4. Copy (Command C) the highlighted emails
    5. Paste (Command V) nto a pages document
    6. Remove the name and anything else preceeding the first < and also the first < of only the first entry whixh will look like this:
         [email protected]>,
    7. Remove the > of the last email which will look like this:
         , Jane Doe <[email protected]
    8. Copy the entire altered list from the pages document
    9, Go to Contact Book and click + to add a new entry
    10.. Name the entry (XXX Group for iPad) or whatever you wish to call it
    11.  Paste all the copied altered list into any one of the email entry spaces
    12.  Click on "Done"
    13.  Create new email On iPad and click on + in any one of the "To" lines and search for "XXX Group for iPad"  You cannot just key in XXX Group for iPad!!!!!!!, you must use + contact search.
    14.  Enter the selected iPad contact group into the "To" line.
    15.  All the entries will now appear in the "To" line and you are good to go.
    Adding or deleting email addresses from the iPad group:
    Easiest:  Alter the original mac group in the usual way and repeat steps 1-14 above.  It seems impossible to edit within the emai line of the iPad contact entry.
    Rediculously simple once figured out.
    Happy emailling, but please send Bcc so that you don't spread your groups' email addresses all over the internet for spam, viruses, and other unwanted emails.  Be considerate and ask your recipients to notifiy you if they wish to be deleted from the lists you compose.

  • Nested grouping

    How do you do nested groups? Does the inner group have to be in a separate table within a row of the outer group? I am developing an XML Publisher version of the packing slip report where there can be multiple lots per item, and multiple items per packing slip.

    Yes you are corrrect, need to create new tables with required columns inside the main table and use for-each inside the new table with in the same row.
    Regards
    Balaji.

  • HT201269 How do I add another contact / recipient to an SMS. Easy in Android, but I can't see how on my 5s.  Have to create a group on my Macbook Pro (OS 9.1), but it's not getting synced via usb. I'd prefer not to use cloud.

    How do I add a contact / recipient to an SMS on iPhone 5s?  It's easy on Android, but I've not sussed it on the iPhone - can't create a group etc.  Tried to create a group on Mac, but it either doesn't exist or won't sync to the phone with usb, nor will other contact details created on Mac.  I'd rather not use the cloud.  I'm sure contacts used to sync to my old iPod touch in Snow Leopard.
    Is it not more logical to have the phone as the main source of this sort of data?  We're more likely to update on a device we carry all the time surely?
    Please advise. Thank you

    Hey Cornish wrinkly,
    It sounds like you want to create a group message. You can read about group messaging on the iPhone here:
    iOS: Understanding group messaging
    http://support.apple.com/kb/HT5760
    Welcome to Apple Support Communities!
    Regards,
    Delgadoh

  • How to create a group calendar?

    Hello,
    i am sorry but this is one more question on wiki-group-calendars.
    *In short:*
    I am not able to create a group calendar with the wiki frontend. the calendar that is created with a wiki is owned by the admin of the wiki. So it is always a personal calendar that cannot be shared in iCal.
    LONG:
    I want to create a group calendar that is viewed and edited through iCal.app and the web service. Apple´s "wiki deployment" guide says on page 57:
    +"The web calendar allows you to easily schedule events for yourself or your group. ...+
    +There are *two types of web calendars: personal and group*. You can send and receive event invitations through the personal calendar but not through the group calendar. Also, *while anyone in a group can create or edit events in a group calendar*, you can edit only events in your own personal calendar or event invitations you send to other people.+
    +The web calendar uses iCal Server to store events and invitations. ..."+
    But there is not mentioned how to create a group calendar. The calendar created with the wiki web-frontend belongs to the admin of that particular wiki. This is why the calendar data ist stored in folder named with the UUID of the wiki admin. Also the alias "http://server.fqdn:8008/principals/groups/mygroupname/" which i provided in iCal turns into ..._uids_UUID-of-the-wiki-admin and only the wiki-admin can access this calendar in iCal.app.
    My research on this topic reveals that there were in issue that should be resolved in 10.6.4 (that is running on our Server). So, again, how to create a group calendar?
    Thanks, Philipp.
    10.6.4 OSX Server
    10.6.x Clients

    farmer tan wrote:
    you need to go to the wiki page and add the wiki's there and then in the setting of the wiki is where you set permissions and services such as calendar, blog, and podcast you can also set all permissions for the wiki in the settings tab
    fyi none of my groups were available unless i logged into the wiki as the Directory Admin not Server Admin
    migrated from 10.5.7 to 10.6
    Message was edited by: farmer tan
    Could you be more specific farmer tan, please?
    You said "you need to go to the wiki page and add the wiki's there...." What is the "wiki page" you mention? Is that some place I go to via the browser or the Server Admin tool?
    I went to http://ical.mysite.com/ical/ and logged in as the Directory Administrator but didn't see anything resembling what you described.
    Thanks in advance for any help you can provide.

  • Error while creating product group

    hi,
    i am getting error while creating Product group.
    Required parameters missing when calling up module
    Message no. M3749
    Please suggest me.. how to cop this
    Regards,
    amit

    Dear Brahmankar,
    I am using product groups in SOP as well as in the normal plannning scenario.In the normal planning scenario I am giving my PIR's in MD61 for the entire group.Then I am running MRP in MD02 for my product group.System is generating all the requirements normally for the entire group .
    Please suggest me , this process is correct or it will create any problem in any module .
    Thanks & Regards
    Prabhakar

Maybe you are looking for