From owner-freebsd-current@FreeBSD.ORG  Sun Jun 15 07:18:38 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7893337B401
	for <current@freebsd.org>; Sun, 15 Jun 2003 07:18:38 -0700 (PDT)
Received: from mail.imp.ch (mail.imp.ch [157.161.1.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8CCE043FDD
	for <current@freebsd.org>; Sun, 15 Jun 2003 07:18:37 -0700 (PDT)
	(envelope-from mb@imp.ch)
Received: from cvs.imp.ch (cvs.imp.ch [157.161.4.9])
	by mail.imp.ch (8.12.6p2/8.12.3) with ESMTP id h5FEIYEU026335;
	Sun, 15 Jun 2003 16:18:35 +0200 (CEST)
	(envelope-from Martin.Blapp@imp.ch)
Date: Sun, 15 Jun 2003 16:18:34 +0200 (CEST)
From: Martin Blapp <mb@imp.ch>
To: Mark Murray <mark@grondar.org>
In-Reply-To: <200306151329.h5FDThHh077681@grimreaper.grondar.org>
Message-ID: <20030615161737.X60004@cvs.imp.ch>
References: <200306151329.h5FDThHh077681@grimreaper.grondar.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: current@freebsd.org
Subject: Re: HEADS UP: rpc.yppasswdd working again 
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 15 Jun 2003 14:18:38 -0000


> he can change passwords on the server at will.

>From the rpc.yppasswdd manpage:

     The FreeBSD version of rpc.yppasswdd also allows the super-user on the
     NIS master server to perform more sophisticated updates on the NIS passwd
     maps.  The super-user can modify any field in any user's master.passwd
     entry in any domain, and can do so without knowing the user's existing
     NIS password (when the server receives a request from the super-user, the
     password authentication check is bypassed). Furthermore, if the server is
     invoked with the -a flag, the super-user can even add new entries to the
     maps using ypchpass(1).  Again, this only applies to the super-user on
     the NIS master server: none of these special functions can be performed
     over the network.

     The rpc.yppasswdd utility can only be run on a machine that is an NIS
     master server.