From owner-freebsd-hackers@FreeBSD.ORG  Wed Mar  3 14:36:24 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C688E16A4CE
	for <hackers@FreeBSD.org>; Wed,  3 Mar 2004 14:36:24 -0800 (PST)
Received: from genius.tao.org.uk (genius.tao.org.uk [212.135.162.51])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3A82643D2D
	for <hackers@FreeBSD.org>; Wed,  3 Mar 2004 14:36:24 -0800 (PST)
	(envelope-from joe@genius.tao.org.uk)
Received: by genius.tao.org.uk (Postfix, from userid 100)
	id 68641487D; Wed,  3 Mar 2004 22:36:23 +0000 (GMT)
Date: Wed, 3 Mar 2004 22:36:23 +0000
From: Josef Karthauser <joe@FreeBSD.org>
To: hackers@FreeBSD.org
Message-ID: <20040303223623.GI1885@genius.tao.org.uk>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="csjV5iuXLa65tnQH"
Content-Disposition: inline
User-Agent: Mutt/1.5.5.1i
Subject: Getting root via a user that was obtained via NIS.
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Mar 2004 22:36:24 -0000


--csjV5iuXLa65tnQH
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Anyone with a bit of NIS saviness care to help me?  I've got a FBSD5.2
machine that is connected to a larger network of suns and linux boxen.
Accounts are coordinated via yellow pages and I've managed to get the
FBSD box's NIS setup so that I can log in as one of those users.

The problem is that it appears that I can't SU to root from a user that
exists in the NIS map, but not locally.  I've added that user to
/etc/group (wheel) but I get:

    phoenix:~  su root
    Password:
    su: Sorry
    phoenix:~  id
    uid=3D9876(jlk23) gid=3D20(staff) groups=3D20(staff), 0(wheel), 14(sysa=
dmin)
    phoenix:~  grep jlk23 /etc/group=20
    wheel:*:0:root,joe,jlk23
    phoenix:~  ypcat passwd | grep jlk23
    jlk23:XXXX:9876:20:Joe Karthauser:/users/jlk23:/local/bin/tcsh

Any ideas?

Joe
--=20
Josef Karthauser (joe@tao.org.uk)	       http://www.josef-k.net/
FreeBSD (cvs meister, admin and hacker)     http://www.uk.FreeBSD.org/
Physics Particle Theory (student)   http://www.pact.cpes.sussex.ac.uk/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An eclectic mix of fact an=
d theory. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--csjV5iuXLa65tnQH
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iEYEARECAAYFAkBGXeYACgkQXVIcjOaxUBZtUQCghM2389DI78iTm4T6dpTYW1qO
pGEAoKQSx/9zpjH+ZyT2YWXZa+ctBo+F
=/oAr
-----END PGP SIGNATURE-----

--csjV5iuXLa65tnQH--