tsconvert and NIS

[Paul Clayton]

Some concern was raised recently in our establishment, when one of our developers ran "john" against our password file and cracked the root password in 5 minutes. Looking into options, I ran tsconvert, and that sorted out my problem. This issue I am raising is our other office use NIS, and there is some concern, that NIS will not work any more after the tsconvert is run on their site. Is this true? I can't see why this would be a problem, but I could not find any info out there that would suggest otherwise.

[Robert-Jan Goossens]

Hi Paul,

What hpux version are you running ?

Regards,
Robert-Jan

[Paul Clayton]

Forgot that bit. 10.20/11.00/11.11

[Robert-Jan Goossens]

Hi,

did a bit of searching nis is not supported nis+ is. Take a look at next docs fron the itrc database.

http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000066028205


http://www4.itrc.hp.com/service/cki/search.do?category=c0&mode=id&searchString=UNX1030213&searchCrit=allwords&docType=Security&docType=Patch&docType=EngineerNotes&docType=BugReports&docType=Hardware&docType=ReferenceMaterials&docType=ThirdParty&search.x=27&search.y=8

Kind regards,
Robert-Jan

[John Carr_2]

I believe if you tsconvert the other office NIS will ignore the changes, except for root so you will effectively harden the root login.

regards
John.

[Paul Clayton]

Top marks to all, I believe this answers the question. My other site I think is using NIS and not NIS+