From owner-freebsd-isp@FreeBSD.ORG  Tue Oct 14 14:06:51 2003
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9572616A4B3
	for <freebsd-isp@freebsd.org>; Tue, 14 Oct 2003 14:06:51 -0700 (PDT)
Received: from unix18.sihope.com (unix18.sihope.com [207.195.195.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9F84943F93
	for <freebsd-isp@freebsd.org>; Tue, 14 Oct 2003 14:06:50 -0700 (PDT)
	(envelope-from adamm@sihope.com)
Received: from unixws1 (unixws1.sihope.com [207.195.195.190])
	by unix18.sihope.com (8.12.9p2/8.12.9) with ESMTP id h9EL6nSh001096
	for <freebsd-isp@freebsd.org>; Tue, 14 Oct 2003 16:06:49 -0500 (CDT)
	(envelope-from adamm@sihope.com)
From: Adam Maloney <adamm@sihope.com>
To: freebsd-isp@freebsd.org
Content-Type: text/plain
Message-Id: <1066165608.543.222.camel@unixws1>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.5 
Date: Tue, 14 Oct 2003 16:06:49 -0500
Content-Transfer-Encoding: 7bit
Subject: NIS problem
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Oct 2003 21:06:51 -0000

Feel my pain :)

We have just begun a migration to NIS (please keep the "NIS sucks",
"Sendmail sucks", "FreeBSD sucks", "You suck", "I suck", etc posts to a
dull roar.)

In the last couple of days we have seen a lot of messages like the one
below appearing in /var/log/messages:

Oct 13 06:14:58 xxxxx ypserv[45883]: access to master.passwd.byname
denied -- client 1.2.3.4:3458 not privileged

This goes on for a number of minutes, and then fixes itself.

Obviously, the problem is that the NIS lookup request is coming from a
non-priveleged (> 1024) port, and ypserv won't honor it.  What's not so
obvious is why/how this is happening.

I'm suspecting it's Sendmail, since the frequency of the message
somewhat coincides with the rate of incoming mail on this box.  But I
can't seem to find any clues on the web or usenet confirming this.  Has
anyone seen this before, or know of a solution?