NIS login discrepancy Post: 35120

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers NIS login discrepancy Post 35120 by Henrik on Friday 28th of March 2003 10:32:05 AM

03-28-2003

Registered User

This has actually made me think a bit more about the passwords situation for NIS on SUN and HPUX. I did a bit of digging and it brought up more questions

From what I could see in the man pages and in some websites the idea for having an nsswitch.conf file was to avoid having the entry "+" in the /etc/passwd and /etc/group files to enable nis and that once you had entries in /etc/nsswitch.conf for passwd and group it overrides the + entries in the /etc/passwd and /etc/group files. I decided to try this out and find out if this was correct (I also wanted to check out what the comport entry in the nsswitch file was for).

What I tried to do is to change the entry in the nsswitch.conf file for passwd from

passwd files nis
to
passwd files

This was to see if I needed to stop and restart the client when changes were made. I tried to log into an nis account subsequant to this change and as expected I couldn't.

I then put the entry back to

passwd files nis

and when I went to log into the nis account everything was now ok.

What I wanted to do next was to disable the entry in the nsswitch.conf by putting # infrom of the passsword entry. The idea was then to check if I could log into the nis account and then if it failed as I expected it to I was going to ad various + type entries to the passwd file. However I found that even if I put a # in front of the passwd entry in the nsswitch.conf file of removed it or even deleted the nsswitch.conf file itself I could log into an nis account I wanted.

I don't know how this is possible if there is no entry or no file anmd there are no + type entries in the passwd file.

Any thoughts ???

P.S. I also noticed when looking into this on HPUX that if you do a man on passwd it gives an example where the entry for nis which is

+:::Guest.

Normally the entry after 3 colons is the group id what is it here. It mentions the pw_gecos of Guest. It says that it contains user info but I am not sure what that is and why it is located where the group id entry should be as there are no man files specifically on it.

Henrik

View Public Profile for Henrik

Find all posts by Henrik

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

NIS users cann't login on AIX and HP

Hey, I've set up a NIS domain with linux as master-server, slave server and clients ... and Linux works fine. To that NIS domain I tried to add a HPUX 11.00 and an AIX 4.3.3 system (till now - there should be more clients in final version). And both systems now have to same problem: I can...

2. UNIX for Dummies Questions & Answers

NIS map mail.aliases specified, but NIS not running

Hi all, I just took over the admin role from someone and I wanna setup sendmail (just to send mail from the host) however, after I config all the resolv.conf, nssitch.conf, hosts file and when I try to send a mail out, after I punched ctl-D, it returned he following, "NIS map mail.aliases...

3. UNIX for Advanced & Expert Users

SUSE 9 and 10 NIS clients with RedHat 8.0 NIS server not working

We have a RedHat 8.0 NIS master, with a RedHat 8.0 NIS Slave. We also have a small number of SUSE 9.1 and SUSE 10 machines here for evaluation. However, no matter what i do, the SUSE machines will not talk to the NIS Servers. If i broadcast for NIS Servers for the specified NIS domain, it...

4. Solaris

How to configure a NIS client bound to the NIS server in another subnet?

Hi, all. I have a Solaris client here needs to bind to NIS server in another subnet. Following is the configuration i made on the client, 1) edit /etc/inet/hosts to add an entry of the NIS server -- nserver01 2) execute `domainname` to set local NIS domain to the domain of the NIS server....

5. Solaris

Incorrect login NIS?

Hello, I have an issue with a NIS client station on my network. I can't log onto with any NIS login and it prompt "Login incorrectl please try again". My others stations work correctly and log on without problem. This station worked correctly before yesterday, but yesterday we've got a power...

6. Shell Programming and Scripting

Validating that the NIS and NIS+ services are disabled

I'm creating a scrip for auditing our AIX box's to ensure that they are built according to our system standards. I'm not sure on the logic for checking to see if the NIS and NIS+ services are disabled. any idea's?

7. Solaris

NIS - Change Password @ first login.

Hi Any body knows how to prompt user to change password on first login in a Solaris NIS client. Thanks HG

8. AIX

AIX: Could not login using NIS Account?

Hi there, I am new to AIX environment, when I set up NIS Client for an AIX 5.3 Machine to connect to a Linux NIS Master, everything seems to be okie: /etc/passwd: +::0:0::: /etc/group: +: ps -ef | egrep "ypbind": /usr/lib/netsvc/yp/ypbind -ypsetme -ypsetme I can get all account...

9. OS X (Apple)

RAM Usage discrepancy

Hey there! I'm a new user here who registered because I couldn't get these kind of questions answered in the place I directly com from. :o I've found a discrepancy in total RAM used and I can't figure out why it is. My only guess is there are some RAM used by some stuff impossible to identify,...

10. AIX

Ssh not allowing NIS user to login

As I do a ssh <nis_user>@server1 from server2, ssh prompts for certificates (as expected the first time), then it prompts for the users password, as soon as I enter the password, I get a Connection to server1 closed by remote host, and connection to server1 closed. and I disconnect back to the...

LEARN ABOUT OPENSOLARIS

ypwhich

ypwhich(1)							   User Commands							ypwhich(1)

NAME

       ypwhich - return name of NIS server or map master

SYNOPSIS

       ypwhich [-d domain] [ [-t] -m [mname] | [-Vn] hostname]

       ypwhich -x

DESCRIPTION

       ypwhich	returns  the  name  of	the  NIS server that supplies the  NIS name services to a NIS client, or which is the master for a map. If
       invoked without arguments, it gives the NIS server for the local machine.  If hostname is specified, that machine is queried  to  find  out
       which NIS master it is using.

       Refer to ypfiles(4) for an overview of the  NIS name services.

OPTIONS

       -d domain    Use domain instead of the default domain.

       -t	    This option inhibits map nickname translation.

       -m mname     Find  the master NIS server for a map.  No hostname can be specified with -m. mname can be a mapname, or a nickname for a map.
		    When mname is omitted, produce a list of available maps.

       -x	    Display the map nickname translation table.

       -Vn	    Version of	ypbind, V3 is default.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWnisu			   |
       +-----------------------------+-----------------------------+

SEE ALSO

       ypfiles(4), attributes(5)

SunOS 5.11							    7 Apr 1995								ypwhich(1)

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

NIS users cann't login on AIX and HP

Discussion started by: mod

2. UNIX for Dummies Questions & Answers

NIS map mail.aliases specified, but NIS not running

Discussion started by: stancwong

3. UNIX for Advanced & Expert Users

SUSE 9 and 10 NIS clients with RedHat 8.0 NIS server not working

Discussion started by: fishsponge

4. Solaris

How to configure a NIS client bound to the NIS server in another subnet?

Discussion started by: sn_wukong