From owner-freebsd-bugs  Mon Oct 13 12:55:44 1997
Return-Path: <owner-freebsd-bugs>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id MAA18810
          for bugs-outgoing; Mon, 13 Oct 1997 12:55:44 -0700 (PDT)
          (envelope-from owner-freebsd-bugs)
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id MAA18804;
          Mon, 13 Oct 1997 12:55:35 -0700 (PDT)
          (envelope-from wpaul@FreeBSD.org)
From: Bill Paul <wpaul@FreeBSD.ORG>
Received: (from wpaul@localhost)
	by freefall.freebsd.org (8.8.6/8.8.5) id MAA20520;
	Mon, 13 Oct 1997 12:54:47 -0700 (PDT)
Date: Mon, 13 Oct 1997 12:54:47 -0700 (PDT)
Message-Id: <199710131954.MAA20520@freefall.freebsd.org>
To: jose@we.lc.ehu.es, wpaul@FreeBSD.ORG, freebsd-bugs@FreeBSD.ORG
Subject: Re: bin/3891
Sender: owner-freebsd-bugs@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Synopsis: NIS-only netgroup lookups don't work

State-Changed-From-To: open-closed
State-Changed-By: wpaul
State-Changed-When: Mon Oct 13 12:44:41 PDT 1997
State-Changed-Why: 

Fixed in revision 1.22 in FreeBSD-current and revision 1.17.2.3 in
RELENG_2_2 of src/lib/libc/gen/getnetgrent.c. The bug was indeed due
to an NIS+ compatibility problem: the Sun rpc.nisd in YP compat mode
does not support the 'reverse' netgroup maps (netgroup.byhost and
netgroup.byuser). The code has been modified such that if a yp_match()
on the 'reverse' maps yields a YPERR_MAP (no such map in server's domain)
error, it will fail over to the 'slow' lookup method. The original
#ifdef CHARITABLE/#endif code was not quite correct as it would yield
a failover on any error; this is not the desired behavior since it
could result in a failed lookup being performed twice. (I must have
realized the code was wrong on some subconsious level which is why it
was #ifdef'ed out.)

This fix will be in 2.2.5-RELEASE.

-Bill