topic Re: UID to name mapping in Operating System - HP-UX

UID to name mapping

Anshumali — Sun, 01 Jun 2008 10:32:16 GMT

Hi folks,

I am suffering from a strange issue. Some how i see my 11.11 lost UID to names mapping for all users other than root. Whenever, i switch to any user and issue ls -ltr, it just shows the UID in owner and group.

VELSD2N0#ls -ltr /etc/passwd
-r--r--r-- 1 root sys 791 Jun 1 16:53 /etc/passwd

VELSD2N0#su - oracle
$ id
uid=108() gid=106()

System is not trusted.
It is all ok for root....

Any suggestions? :)

Thanks,
Anshu

Re: UID to name mapping

TTr — Sun, 01 Jun 2008 10:44:50 GMT

Your /etc/passwd is not readable by non-root.

The permissions should be -r--r--r-- or 400.

Re: UID to name mapping

Dennis Handly — Sun, 01 Jun 2008 11:00:54 GMT

Are you using NIS? I have this happening every once in awhile.
What's in /etc/passwd, just enough to point to NIS?
Try this:
/sbin/init.d/nis.client stop
/sbin/init.d/nis.client start

See these threads:
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1184911
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1222063

Re: UID to name mapping

Jeeshan — Sun, 01 Jun 2008 11:15:56 GMT

Hi Anshu

check your /etc/default files and from SAM check the UID is unique to all users.

Re: UID to name mapping

TTr — Sun, 01 Jun 2008 12:40:45 GMT

> VELSD2N0#ls -ltr /etc/passwd
> -r--r--r-- 1 root sys 791 Jun 1 16:53 /etc/passwd

Right in front of my eyes!!

Anyway, just in case check if /etc itself is cd-able by non-root and verify what the other people suggested.

Did you run any hardening or auditing scripts on this server and can you correlate to some event when this problem started?

Re: UID to name mapping

Duncan Edmonstone — Sun, 01 Jun 2008 13:34:15 GMT

Do you have an /etc/nsswitch.conf file?

What are the contents?

HTH

Duncan

Re: UID to name mapping

Anshumali — Tue, 03 Jun 2008 07:32:23 GMT

Thanks all.
It was closed. The issue was with permission on /etc

Cheers!
Anshu

Re: UID to name mapping

Anshumali — Tue, 03 Jun 2008 07:33:20 GMT

/etc/ was set to 600, it was changed back to 555