UID to name mapping

[Anshumali]

Hi folks,

I am suffering from a strange issue. Some how i see my 11.11 lost UID to names mapping for all users other than root. Whenever, i switch to any user and issue ls -ltr, it just shows the UID in owner and group.

VELSD2N0#ls -ltr /etc/passwd
-r--r--r-- 1 root sys 791 Jun 1 16:53 /etc/passwd

VELSD2N0#su - oracle
$ id
uid=108() gid=106()

System is not trusted.
It is all ok for root....

Any suggestions? :)

Thanks,
Anshu

[TTr]

Your /etc/passwd is not readable by non-root.

The permissions should be -r--r--r-- or 400.

[Dennis Handly]

Are you using NIS? I have this happening every once in awhile.
What's in /etc/passwd, just enough to point to NIS?
Try this:
/sbin/init.d/nis.client stop
/sbin/init.d/nis.client start

See these threads:
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1184911
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1222063

[Jeeshan]

Hi Anshu

check your /etc/default files and from SAM check the UID is unique to all users.

[TTr · Accepted solution]

> VELSD2N0#ls -ltr /etc/passwd
> -r--r--r-- 1 root sys 791 Jun 1 16:53 /etc/passwd

Right in front of my eyes!!

Anyway, just in case check if /etc itself is cd-able by non-root and verify what the other people suggested.

Did you run any hardening or auditing scripts on this server and can you correlate to some event when this problem started?

[Duncan Edmonstone]

Do you have an /etc/nsswitch.conf file?

What are the contents?

HTH

Duncan

[Anshumali]

Thanks all.
It was closed. The issue was with permission on /etc

Cheers!
Anshu

[Anshumali]

/etc/ was set to 600, it was changed back to 555