NIS and password aging

[Rick Schopp]

I've read most, perhaps all, of the notes on this subject in this database. Some say it will work some say it won't. I do understand it is not supported. I fully understand use of the ",2/xx" following the encrypted password. It does work, however when the password expires and you log on, login tells you it is expired, asks you to change your password. After you change the password login then asks you to log in again. Unfortunately, in NIS the password map is only updated once per hour so you are locked out for up to an hour after changing your password. Is there a work-around

[A. Clay Stephenson · Accepted solution]

All you should need to do is add the -m option to yppasswdd. Man yppasswdd for details. The maps will be pushed as soon as the yppasswd request is processed. One thing that can cause ypasswdd is the inappropriare existence of the lockfile '/etc/ptmp'. If passwdd dies, this file can be left in place and must be removed before the daemon can function properly.

[Sanjay_6]

Hi Karl,

You can also try the login patch, PHCO_19292 for 11.0. It has been superceded by patch PHCO_25590

http://us-support2.external.hp.com/wpsl/bin/doc.pl/screen=wpslDisplayPatch/sid=b5f08ff6142d5a3aed?PACH_NAM=PHCO_25590

Hope this helps.

Regds

[Sanjay_6]

Hi Carl,

Sorry about mistyping your name in the post above.

Regards
Sanjay

[Rick Schopp]

Thanks Guys. Looks like it is going to take some extended time to get ok to test the -m option but that looks promising. The patches look ok, we are one ahead of the basic required fix for NIS.