Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 13 Apr 2002 22:32:33 -0400
From:      "dave" <dmehler@siscom.net>
To:        "Dan Pelleg" <peldan@yahoo.com>
Cc:        <freebsd-questions@FreeBSD.org>
Subject:   Re: nis on fbsd 4.5?
Message-ID:  <002f01c1e35c$a3583d50$0200a8c0@satellite>
References:  <3c911249$0$34134$9a6e19ea@news.newshosting.com><u2s663szlhl.fsf@gs166.sp.cs.cmu.edu><000401c1cf59$c629c630$0200a8c0@satellite><15511.31006.133996.135215@localhost.alias.cs.cmu.edu><000401c1cf86$3a4481a0$0200a8c0@satellite><15511.47050.699508.718343@localhost.alias.cs.cmu.edu><000801c1e316$23f10bf0$0200a8c0@satellite> <15544.59213.208085.673123@palraz.wburn>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
    I'll try to answer your questions.
    I can only log in to the clients as a non-nis user, and as such ypcat
passwd does display the password file, however ypcat group displays what i'm
assuming is the fbsd box's /etc/group file or maybe the rh box's group file,
in any rate it's not the right file.
    Can you explain what you mean by hashed passwords? The fbsd box is using
md5 as are the rh box.
        I do not have net groups.
    The passwd and group lines on the rh box's /etc/nsswitch.conf file read:
passwd:    files    nis
shadow:    files    nis
group:    files    nis
Finally, the
+:::::::::
line in /etc/master.passwd
and
+:*:0:
line in /etc/group
are on the fbsd server, not the rh client.
Thanks, and i'll let you know when i solve this, as it is annoying to say
the least.
Dave.

----- Original Message -----
From: "Dan Pelleg" <peldan@yahoo.com>
To: "dave" <dmehler@siscom.net>
Sent: Saturday, April 13, 2002 10:19 PM
Subject: Re: nis on fbsd 4.5?


>
>  I know nothing about proftp. Some ideas:
>
>  * as always, does "ypcat passwd" work on the clients? As root? As a user?
> "ypcat group"?
>
>  * Are the hashed passwords the same as they are for a local password (ie,
> hash method compatibility)?
>
>  * what do the "group" and "passd" lines in nsswitch.conf on the client
> say?
>
>  * do you have a netgroup file in /var/yp? I just had a strange case like
> you describe, just for a single user, and it got solved once I put an
entry
> for him in netgroup.
>
>  Here's what I have on the client (hopefully I'm not forgetting a piece
> out):
>
> /etc/nsswitch.conf:
> ...
> passwd:     compat
> shadow:     files
> group:      nis files
> ...
>
>
> passwd:
> ...
> -root::0:0:::
> +@HOSTNAME::0:0:::
> +:*:0:0:::/sbin/nologin
>
> Where HOSTNAME is the name of the host, and I have a netgroup (in
> /var/yp/netgroup on the server) named HOSTNAME with the list of users that
> are allowed login to this host. I'l admit I don't know offhand what the 0s
> means or why I put them there.
>
> In /etc/sysconfig/network:
> ...
> NISDOMAIN="MYDOMAIN"
>
> In /etc/yp.conf - the obvious.
>
> I don't seem to have any "+" lines in /etc/group. I guess the
nsswitch.conf
> line does it.
>
>
>  And again, if you find the culprit - let me know since I'd like to send a
> PR to the handbook team so they can mention it.
>
>
> dave writes:
>  > Hi,
>  >     Thanks for your help with my previous posts on nis. I've had to
redo the
>  > fbsd box however now i'm back to the same problem, i've set it up both
as a
>  > nis master and nis client, all user's can log in to it, but not to any
other
>  > machines, specifically linux, i've turned unsecure mode on, remade the
nis
>  > maps, that didn't do it, also when using proftpd user's can not log in
to
>  > the nis box, i've put PersistentPasswd off in proftpd.conf
>  >     At the end of master.passwd i've put
>  > +:::::::::
>  > and at the end of group
>  > +:*:0:
>  >     Any suggestions appreciated.
>  > Thanks.
>  > Dave.
>  >
>  > ----- Original Message -----
>  > From: "Dan Pelleg" <peldan@yahoo.com>
>  > To: "dave" <dmehler@siscom.net>
>  > Sent: Tuesday, March 19, 2002 6:12 PM
>  > Subject: Re: nis on fbsd 4.5?
>  >
>  >
>  > > dave writes:
>  > >  > Hi,
>  > >  >     Thanks for that information. Is there any other directives
that you
>  > add
>  > >  > to your pw.conf? And did you have to alter /var/yp/Makefile to get
>  > members
>  > >  > to show up in nis groups via name rather than uid? There's a line
>  > srcdir
>  > >  > that i had to change from /etc to /var/yp
>  > >  >     Thanks.
>  > >  > Dave.
>  > >
>  > > I think I have a line for the default shell, and another one for the
>  > > default home dir.
>  > >
>  > > I don't know if you mean NIS groups or NIS netgroups. In any case, I
>  > > suspect the machine you're testing this on doesn't run a NIS client
and/or
>  > > isn't set up to read usernames from NIS. This can happen on the
server,
>  > too
>  > > (ie, if it's not setup as a client it doesn't know about the NIS
>  > > users). This part (unlike pw.conf) is well-documented in the
handbook.
>  > >
>
>
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002f01c1e35c$a3583d50$0200a8c0>