AIX

Let's continue on this track. What about "getent shadow <username>" and "ypcat shadow | grep <username>" ?

Do they both return the same password?

Hi, as your suggest, I did
On the linux server :
getent shadow <username> returns username and hashed password
ypcat shadow | grep <username> returns nothing
On the client (AIX) :
getent shadow <username> : there is no command named getent
ypcat shadow | grep <username> returns nothing

Apparently, then, you did this on the server. Could you also do it on the AIX host, please? (now "passwd", not "shadow")

Hi, thank you
On both AIX client and Linux server : "ypcat passwd | grep <username>" resulted the same output.
However, there is no command named "getent" in AIX so I only do it on Linux server and on the Linux server only I did:
ypcat passwd | grep <username>
getent passwd <username>
getent shadow <username>
and get the same password value on each ouput.

Any suggestion, please

What is happening here is that the shadow file is (a) not being exported by the Linux server or (b) not being recognized by the AIX client. I'm currently not running NIS here, and I don't recall exactly where to look for it, but there is a file which describes which IPs and subnets which tables can be sent to. You need the shadow file so that passwords can be tested. There is, however, a compatibility mode where Linux will send the encrypted password in the request for the user's entry in the passwd table. Then, however, you won't see an "x". When you run the commands on AIX, where you root? If not, try "ypcat passwd |grep <username>" again but with your root account.

I'm not sure why su works differently, but there's a way to check: Does AIX use PAM (Pluggable Authentication Modules)? You can test this by looking in /etc/ for a file named pam.conf or a directory named pam.d.

Hi otheus,
I tried but nothing changes when run command with root account.
And I don't see that there is a pam.conf on AIX so my AIX client uses LAM (Loadable Authentication Module).
I'm stuck here.

When you "su to that account", did you do so as root?