NIS+ Root master server question

[Penni Nussbaum]

I have just set up a server as a root master server for nIS+. When I log in as a user, the message "Password does not decrypt secret key for unix.userid@domainname". I still am able to log in. What did I do wrong?

[Sanjay_6 · Accepted solution]

Hi Penni,

Take a look at the thread below for more info,

http://us-support.external.hp.com/cki/bin/doc.pl/sid=cc8445d71b3abe000c/screen=ckiDisplayDocument?docId=200000055037864

hope this helps.

thanks

[Penni Nussbaum]

Sanjay,
This is very helpful as I didn't see any of this information in the manual (chpt 5 Configuring NIS+) that I am using. However, when I try any of these commands I am getting errors. What am I doing wrong?

$ id
uid=289850(u289850) gid=20(users)
$ nisdefaults
Principal Name : u289850.testsdm.com. (not authenticated)
Domain Name : testsdm.com.
Host Name : usdmltt1.testsdm.com.
Group Name :
Access Rights : ----rmcdr---r---
Time to live : 12:00:00
Search Path : testsdm.com.
$ keylogin
Password:
Could not find unix.289850@testsdm.com's secret key
$ chkey -p
Updating files publickey database.
Reencrypting key for 'unix.289850@testsdm.com'.
Please enter the Secure-RPC password for u289850:
chkey: could not get secret key for 'unix.289850@testsdm.com'
$ nisclient -u
sh: nisclient: not found.
$ /usr/lib/nis/nisclient -u
At the prompt below, type the network password (also known
as the Secure-RPC password) that you obtained either
from your administrator or from running the nispopulate script.
Please enter the Secure-RPC password for u289850:
chkey: could not get secret key for 'unix.289850@testsdm.com'
**ERROR: chkey failed.

The network password that you have entered is invalid.
If this machine was initialized before as a NIS+ client,
please enter the user login password as the network
password.
Or re-type the network password that your administrator
gave you.

Please enter the Secure-RPC password for u289850:
chkey: could not get secret key for 'unix.289850@testsdm.com'
**ERROR: chkey failed again.
Please contact your network administrator to verify your network password.

Or as root...

usdmltt1 # nisaddcred -p 289850 -P u289850.testsdm.com. local
usdmltt1 # nisaddcred -p unix.u289850@testsdm.com -P u289850.testsdm.com. des
Updating key pair for unix.u289850@testsdm.com (u289850.testsdm.com.).
Enter u289850.testsdm.com's root login password:
Retype password:
nisaddcred: error creating credential, NIS+ error: Not found

[Penni Nussbaum]

Sanjay,
I got it to work fo a specific user. Since this will be a new implementation, do all the users have to do this procedure or can I as root set this?