- Login access via access_loginwindow
- OS X admin privs via the admin local group
- sudo access via /etc/sudoers
Run Directory Utility
open /System/Library/CoreServices/Directory\ Utility.app/and tick 'BSD Flat File and NIS' and inside there tick 'Use User and Group records in BSD Local node'. Interestingly this is gone on Lion - it is now just NIS and there is no option for BSD local node...
Assuming you have some entries in /etc/netgroup:
smalltest (-,auser,)You should be able to see them with dscl:
$ dscl localhost -read /BSD/local/NetGroups/smalltest dsAttrTypeNative:triplet: -,auser, AppleMetaNodeLocation: /BSD/local RecordName: smalltestAnd should theoretically be able to use them. I tried this for sudo, and although it passed syntax checking it just didn't work.
+smalltest ALL=(ALL) ALLAnd I couldn't get dseditgroup to recognise the netgroup for use in access_loginwindow:
$ sudo dseditgroup -o edit -a smalltest -t group com.apple.access_loginwindow Group not found.