adclient.ignore.setgrpsrc

This configuration parameter specifies whether adclient accesses the ~/home/.setgrpsrc file when a user issues commands such as groups and id that return information about users’ group membership.

Whenever it accesses the ~/home/.setgrpsrc file, adclient mounts the specified user’s home directory. This behavior can be problematic because it makes it difficult for administrators to control mounts to file servers. For example, moving a file server requires removing all mounts, so before doing so, an administrator must scan for mounts that may have been created by running groups or id. In addition, the extra NFS mounts generated by this behavior reduce the number of reserved ports available on Red Hat systems and can slow system performance.

You can set this parameter’s value to either true or false. When true, adclient ignores the ~/home/.setgrpsrc file when a user issues commands such as groups and id, and does not mount the specified user’s home directory. When false, adclient does check the
~/home/.setgrpsrc file when a user issues commands such as groups and id, and does mount the specified user’s home directory.

The default value is false.

To change the value to true, such that adclient does not check the ~/home/.setgrpsrc file and mount a user’s home directory when checking for group membership, set this parameter’s value to true in the configuration file:

adclient.ignore.setgrpsrc: true

After setting this parameter, you must run adreload to reload the configuration file.

Note:   Setting this parameter does not affect the use of the adsetgroups command by the current user to view or change group membership. For a logged on user, the home directory is already mounted.