"Could not set secret key for ..." message

[Norman Lowe]

HP server is configured as a NIS+ client. The server for the NIS+ domain is a Sun machine. Every two or three days, when logging into the HP, get the message "Could not set secret key for unix.824@devenv1.bt.co.uk. The key server may be down." The login then hangs, after running the .profile. Typing Control C twice then allows the login to complete. Rebooting the HP clears the problem until the next time.

Any ideas?

[steven Burgess_2]

Norman

A couple of things to look at

Where are you resolving ? locally on the client or on the NIS machine ?

entry in /etc/nsswitch.conf will tell you

hosts: files [NOTFOUND=continue] nis

On your client, what is you variable MAX_NISCHECKS set to in /etc/rc.config.d/namesvrs file ?

Steve

[Norman Lowe]

in nsswitch.conf:

hosts: files dns nisplus [NOTFOUND=return]

MAX_NISCHECKS is set to 2

[Brian Hackley]

Norman,

The obvious question that I had is, "Is keyserv running at the time of the failure"? If not, did you try restarting it?

If it is running, then you've probably encountered a more detailed NIS+ problem that might require more extensive debugging. ITRC document NETUXKBRC00006829 helps you to understand if the user does get properly authenticated. Beyond that, a network packet trace might
be helpful. Use snoop on the Sun server and/or nettl + netfmt on the HPUX system.

Regards,

-> Brian Hackley