Netgroup Problem with dns and nis client

[SupraTeam_1]

Hi all,
I've this problem :
When i want to connect on different hp-ux workstations i have to authenticate.
It isn't correct because i work on a same domain NIS with dns for hosts ( nsswitch.conf hosts: dns files nis ).
I use netgroup table nis whit long and short name for workstations.
My /etc/hosts.equiv +@group_workstations.
When dns is disable i haven't to authenticate.
When dns is enable i haven't to authenticate for HP-ux to HP-ux and HP-ux to solaris, my problem is when i want to connect solaris to hp-ux.
Furthermore it's ok when i upgrade my hosts.equiv by all whorkstations names.

Somebody has one idea ?

Thanks

[V. Nyga]

Hi,

you could try to configure it with /.rhosts
If you define:

the named user doesn't need to login from the workstation ws_name.

HTH
Volkmar

[SupraTeam_1]

This OK but i should use a centralize solution and the only solution it's NIS : netgroup.

[Peter Nikitka]

Hi,

check for the hostname your hp gets when a solaris box connects to it:
Use 'rlogin hp-box' from the sun and check there with
who am i -R

This hostname (FQN or plain) should be in the netgroup entry.
Check further, if no tcp_wrapper/inetd.sec is adding more security restrictions.

mfG Peter

[SupraTeam_1]

Thanks but All it's correct !

[Darrel Louis · Accepted solution]

Hi,

When you do a lookup and a reverse lookup,
what is the result:
nslookup
nslookup

Also check if your nsswitch.conf file is correct?

GoodLuck

Darrel

[Arunvijai_4]

Hello,

Your problem is not clear. Can you please explain a bit more ?

-Arun

[SupraTeam_1]

Nslookup and reverse are OK.

This is my nswitch.conf :
#
passwd: files nis
group: files nis
hosts: dns files nis
networks: nis [NOTFOUND=return] files
protocols: nis [NOTFOUND=return] files
rpc: nis [NOTFOUND=return] files
publickey: nis [NOTFOUND=return] files
netgroup: nis [NOTFOUND=return] files
automount: files nis
aliases: files nis
services: files nis

I use /etc/hosts.equiv :
+@workstation

and i use short and long name on nis netgroup workstation.

All it's ok but when i connect by rlogin Sun to HP i have to authenticate

[Muthukumar_5]

what is the workstation netgroup containing?

Can you post that information.

How you are trying to do rlogin from SUN to HP and by which user?

--
Muthu

[Arunvijai_4]

Hello,

When you try to rlogin what error you get ? Are you able to use any other remote services ?

-Arun

[Darrel Louis]

Hi,

What's the result of your ypwhich command and
"ypcat netgroups".

Are you sure that there isn't a difference between your host-file and DNS.

Because it's working when you disable DNS?

Darrel

[SupraTeam_1]

This a part of my netgroup:
workstation hpux1 domain
workstation hpdyn1.fr.exemple domain

I use an user acount .
The error is that i must authenticate by password like that:

suprateam@solaris1$ rlogin hpux1
Password:

[Arunvijai_4]

Hello,

What happens when you try from Solaris to HP-UX ? Also, check your Soalris nsswitch.conf for consistency.

-Arun

[SupraTeam_1]

It's impossible to see netgroup map on HP NIS.
But when i don't use dns all it's allright.
There is no difference between your host-file and DNS.

[SupraTeam_1]

nsswitch.conf it's the on HP and solaris.

This Solaris to Hp-ux

suprateam@solaris1$ rlogin hpux1
Password:

[Muthukumar_5]

From hpux machine,

rlogin to same hp-ux machine? Is it prompting for password.?

Can you try in reverse manner as,

hp-ux to solaris with rlogin? What it is saying? May be a problem with netgroup setting and .rhosts file setup.

which is the os version of hp-ux?

--
Muthu

[Arunvijai_4]

Hello,

What does your /etc/netgroup contain ? .rhosts file ?

-Arun

[Arunvijai_4]

Hello,

Can you check these threads,

http://h21007.www2.hp.com/dspp/ml/showArchiveMessage/1,,4!01!10!0049,00.html
http://h21007.www2.hp.com/dspp/ml/showArchiveMessage/1,,4!01!10!0050,00.html

-Arun

[SupraTeam_1]

I have only the problmem when i login Sun to hp,nothing when hp to hp , sun to sun and hp to sun.


nothing in /etc/netgroup
nothing on .rhosts

If i upgrade my /etc/hosts.equiv by the name of my worhstation all it's OK.
But i must use the netgroup to manage my workstation

I use hp11i

[Arunvijai_4]

Hello,

May be you can try adding /etc/netgroup file in HP-UX. This may help you. # man netgroup for more information.


-Arun

[Darrel Louis]

Hi,

I don't see DNS in your nsswitch.conf?

Can you also paste your hosts.equiv

Darrel

[SupraTeam_1]

I will test /etc/netgroup.

Darrel Louis, i use dns on hosts line :
dns files nis

And my hosts.equiv , it's like +@workstation

[Darrel Louis]

Sorry my mistake.

[Muthukumar_5]

Configure /etc/netgroup file with netgroup and machine name.

See man netgroup and man .rhosts for +@netgroup_name, -@netgroup_name option explanation. It will give all about.

--
Muthu

[Muthukumar_5]

Add in /etc/netgroup file as,

netgroupname (,,domainname)

Refer .rhosts examples.

--
Muthu