Password changing problem

[Randy Brown_1]

We have implemented password aging on our systems. This week was when the 90 day period we set is up and our users are being asked to change their passwords when they log in. They enter their username and "old" password. They are then prompted to change their password - entering the old one and then the new one twice as expected. The problem occurs at this point. They cannot log in until ypmake has been run. I keep running it maually everytime the phone rings. ;) No fun. There has to be an easy way to solve this. Any help would be greatly appreciated.

We are running HP-UX 10.20 on our NIS server. Clients are HP-UX 10.20, solaris 7 & 8, and Redhat Linux 7.1 and 7.2.

Thank you,

Randy Brow

[Steven E. Protter]

So this is an NIS problem. Your Master server isn't getting the password change out to the slave machines.

What would be the problem about using the yp utilities to push the security information a little more often?

Further, it would seem that you may have a problem with NIS, and some more data will have to be posted for anyone to help with that.

SEP

[Helen French]

Make sure that you have a cron job set up on the master server that does 'ypxfr' between servers. This is automatically set by NIS when you first create your maps and install NIS. Check the output logs and NIS logs. If needed, you can create your own script and put it on the crontab file.

[S.K. Chan]

I suspect on your NIS server, some parameter is not setup correctly hence the password changes does not get pushed out automatically. Can you provide these ..(on your NIS master)..
1) /etc/rc.config.d/namesvrs
The line that starts with "YPPASSWD".
2) The directory where the master password file is located (we all know the default is /etc).

[Randy Brown_1]

Line from /etc/rc.config.d/namesvrs:

YPPASSWDD_OPTIONS="/etc/passwd -m passwd PWFILE=/etc/passwd"

Master passwd file is /etc/passwd

Thank you!

Randy

[Helen French]

For troubleshooting purpose, you can add -l option in the YPPASSWD optios like this:
YPPASSWDD_OPTIONS="/etc/passwd -l /var/adm/yppasswdd.log -m passwd PWFILE=/etc/passwd".

Now restart the services and see if you get any error message in the log file.

[S.K. Chan]

Need more info .. this happens everytime any user change the password or only when it expired ? Does this happens to all the users or just a group of users which their machines are served by the same slave ? Can you try changing the password with ..
$ passwd -r files
and then
$ passwd -r nis
If you don;t have local entry in /etc/passwd the former should come back and say "invalid login". The latter would be updating the nis map. Just wanted to see if this makes any difference.