problem with nis groups (debian)

I'm having a problem with nis groups under linux.

I've added some group in my /etc/group file, after the nis "+" entry

These group show up on a "ypcat group" from server or from any client, and
the gid's are correct. "getent group" returns all the nis groups.

On a particular export, a particular directory is group writeable; on the
server I can write in this directory given I'm a member of said group.

However, on a client, I cannot do a thing. NIS group resolution doesn't seem
to be working even though ypcat returns the group and gid, and ls -l
returns the right group. This group does not exist locally on either
machine. I just get "permission denied" whenever I try to modify / write a
file. The export is mounted rw. A nis user can modify a file if they own
it - i.e., passwd stuff seems to be working fine. It's only group.

If I do go ahead and create local groups on each machine with the same gid,
it of course works fine.

My nsswitch.conf to my knowledge is correct, with "compat" set for group.

Have you restarted nscd (cache daemon) daemon.
Also check output of command : %groups whether it shows this
group name.
Also check permission of file which you are trying to modify/write.

To restart nscd run following command :-

service nscd stop
service nscd start

let me know if it works. Otherwise tell me Linux vendor and version.

rajumahala wrote:

> Have you restarted nscd (cache daemon) daemon.
> Also check output of command : %groups whether it shows this
> group name.
> Also check permission of file which you are trying to modify/write.
>
> To restart nscd run following command :-
>
> service nscd stop
> service nscd start
>
> let me know if it works. Otherwise tell me Linux vendor and version.

It was a problem with nfs - there is a limit in the rpc standard of 16
groups or so. Over that, nfs doesn't understand them.

Thanks for updating the result/solution.
It means you were assigning more than 16 secondary group for a login.