topic Re: NIS/YP authentication control issues in Operating System - HP-UX

NIS/YP authentication control issues

Alex Green — Fri, 06 Jun 2003 07:20:07 GMT

Hi All,

I'm having an issue for HPUX11i and NIS/YP. The machine is currently in the process of updated for use with ClearCase. However I have the problem that when I remove the + from the passwd all users can still login. The only way to prevent user login is to remove the nis option from the nsswitch.conf. But I need the nis UID/GID info.

Can anyone tell me how I can restrict logins to certain users without allowing everyone.

Thanks.
P.S. I have tried with +username only, however all users can still login

Re: NIS/YP authentication control issues

Massimo Bianchi — Fri, 06 Jun 2003 07:38:34 GMT

Hi,
did you changed the /etc/nsswitch.conf ?

I think you have to change the password and group lines.

Massimo

Re: NIS/YP authentication control issues

Alex Green — Fri, 06 Jun 2003 08:35:23 GMT

I have changed the passwd and groups line so that nis is included as well as files, this is needed otherwise ClearCase well not know all the required UID/GID info.

However when nis is included all users can login

Thnx

Re: NIS/YP authentication control issues

Massimo Bianchi — Fri, 06 Jun 2003 08:37:58 GMT

Did you try disabling the account ?

or

After the change of the passwd, did you re-issued the refresh command for nis (i don't remember it now). may be NIS caches the information..

Massimo

Re: NIS/YP authentication control issues

Alex Green — Fri, 06 Jun 2003 08:43:34 GMT

Ok,

The original config was to allow all users local & NIS to login. So the /etc/passwd & /etc/group has "+" as the last entry and the nsswitch.conf has "nis" after "files" for passwd & group.

However I now want that only one NIS user can login aswell as the local users. So I left the nsswitch.conf how it was configured and replaced the "+" with "+username" in the /etc/passwd & /etc/group.

But with the new configuration all users can login, it is not at all restricted to the "+username", which is how it works on every other *NIX.

Re: NIS/YP authentication control issues

Dmitry G. Spitsyn — Mon, 16 Jun 2003 17:24:00 GMT

Alex !

All you need now is to add the following lines for passwd and group into /etc/nsswitch.conf:

passwd: compat
group: compat

BR,
Dmitry

Re: NIS/YP authentication control issues

Caesar_3 — Mon, 16 Jun 2003 18:55:36 GMT

Hello!

Check your client config file
/etc/nsswitch.conf
and change the passwd ang group will take
only from local not from NIS

Caesar