Output of getent group

Similar to This question, but different result set, can anyone help me with the output of getent group?

It's something like this:

groupname:x:0:

just not sure what the x:0: signifies?

2 Answers

getent group <group_name>

queries the /etc/group file and gets the entry for the mentioned group from the file.

The output format is:

group:password:GID:user(s)

• group is the group's name

• password is the encrypted group password, empty field signifies no password, x bit signifies the password is in the file /etc/gshadow

• GID is the Group ID

• user(s) is the list of users member of this group, empty means this group has no member.

Now, if you check the /etc/gshadow file you will see that the group password is locked (! or *) in the password field, thats because the group password is not used. It's considered a security risk to have all members of the group share the same password. (At least i have never come across any implementation of gshadow).

The accepted answer is not complete. getent also reads SSSD info to get LDAP group which is not listed in /etc/group. cat /etc/nsswitch.conf and check the group line to see what group info source you have.

cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat systemd sss
group: compat systemd sss
shadow: compat sss
gshadow: files
hosts: files mdns4_minimal [NOTFOUND=return] dns myhostname
networks: files
protocols: db files
services: db files sss
ethers: db files
rpc: db files
netgroup: nis sss
sudoers: files sss