Date: Thu, 24 Apr 2003 10:58:55 -0500 From: Glenn Johnson <gjohnson@srrc.ars.usda.gov> To: "Jacques A. Vidrine" <nectar@FreeBSD.org>, freebsd-current@FreeBSD.org Subject: Re: groups wrong on NIS clients Message-ID: <20030424155855.GA74410@node1.cluster.srrc.usda.gov> In-Reply-To: <20030424020829.GA73546@madman.celabo.org> References: <20030423210539.GA1348@node1.cluster.srrc.usda.gov> <20030423215038.GB22152@madman.celabo.org> <20030423220754.GA16387@node1.cluster.srrc.usda.gov> <20030423221120.GA22798@madman.celabo.org> <20030423221915.GA17543@node1.cluster.srrc.usda.gov> <20030424020829.GA73546@madman.celabo.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Apr 23, 2003 at 09:08:29PM -0500, Jacques A. Vidrine wrote: > On Wed, Apr 23, 2003 at 05:19:15PM -0500, Glenn Johnson wrote: > > > > How are you logging in? > > > > I was using ssh. After reading your message, I went down the hall > > and logged in via the console. The groups are set correctly when > > logging in via the console. > > > > Whatever login process you are using is responsible for setting > > > your group list correctly. It has not done so. > > > > As a note, the groups were set correctly via ssh before I updated to > > the latest sources today. My previous -current was from April 15, > > 2003. > > Do you have UsePrivilegeSeperation turned on? (Not that this should > make a difference ... `works here'.) I tried with it on and off, same result. > Do you have anything different from the default configuration? I am HostbasedAuthentication. That has never been a problem before. Anyway, I tried without it and get the same result. > The only thing I can think of that might give you different results > when logging in via the console versus via sshd is if the latter > cannot contact the NIS server for some reason. Do you see (e.g. with > tcpdump) any NIS queries when you attempt to login via ssh? Yes, I get messages like the following: 10:28:15.092664 node1.cluster.srrc.usda.gov.nfs > node11.cluster.srrc.usda.gov.207013284: reply ok 116 lookup ERROR: No such file or directory > If you want to dig deeper, you should arrange for sshd to spit out the > group list. I will gice that a try. -- Glenn Johnson USDA, ARS, SRRC Phone: (504) 286-4252 New Orleans, LA 70124 e-mail: gjohnson@srrc.ars.usda.gov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030424155855.GA74410>