unable to set uid/gid after NIS Master server change

[JP_ Lynch]

Replaced an aging AIX server who's role is the NIS master server. When users try to login to the HP/UX server which is an NIS Client they get "unable to set uid/gid". Any ideas on this one?

[JP_ Lynch]

Also, all other NIS client machines (Sun Solaris 9, 10, Red Hat Linux, Fedora) are all fine.

[TTr]

This might be the password encryption method that the new NIS server is using. Check out these threads. It doesn't matter that the NIS server in these threads is a Linux server, md5 most like is wht is used on your aix master. Look at the penultimate response of the first url.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1244687

http://forums11.itrc.hp.com/service/forums/bizsupport/questionanswer.do?threadId=40773

[JP_ Lynch]

Not really sure where they are suggesting changing the MD5 to DES? On AIX NIS server or on HP/UX NIS client? If it is on HP, where would that be?

[JP_ Lynch]

Checked /etc/passwd and they definitely are not MD5 based on key length and start byte. When I am logged in as root and try to 'su' to any of the NIS users I get the following:

setgroups: Invalid argument
setgroups: Invalid argument
su: Unable to initialize group access list

here's /etc/group :

root::0:root
other::1:root,hpdb
bin::2:root,bin
sys::3:root,uucp
adm::4:root,adm
daemon::5:root,daemon
mail::6:root
lp::7:root,lp
tty::10:
nuucp::11:nuucp
users::20:root
nogroup:*:-2:
smbnull::101:
mysql::102:
build::50:adm,hpdb,root,swadmin
+:

[Robert-Jan Goossens]

Hi,

Could you post the output of?

# ll /usr/bin/su
# ll -lad /usr

Robert-Jan

[JP_ Lynch]

# ll /usr/bin/su

-r-sr-xr-x 1 root bin 28672 Oct 4 2002 /usr/bin/su*

# ll -lad /usr
dr-xr-xr-x 23 bin bin 8192 Jan 14 16:13 /usr/

[Robert-Jan Goossens]

# grep nogroup /etc/groups

http://www13.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c00928644-4

Title: getting setgroups: invalid argument when logging in as root
Document ID: emr_na-c00928644-4

[JP_ Lynch]

Unfortunately I don't have enough 'power' to view your link. Access denied, requires uber-support contract.

[JP_ Lynch]

on AIX 5.3L NIS Master:
nobody:!:4294967294:nobody,lpd

but there is no definition for:
nogroup (which has the -2 ID value).

So I have added the definition for nogroup to AIX NIS Master /etc/group taken from the HP/UX 11.11 server (NIS Client) side.

And that doesn't work.