unable to login as NIS user in hpux

[vineshn]

Hi,
I am unable to login as NIS user but i am able to login as root and then if i tried as NIS user it works (su - "nis user").

is there any security settings need to change?

login: nisuser
Password:
Login incorrect

Wait for login retry: ..
login:


-Vinesh

[Steven Schweda]

"su - nis_user" doesn't need the password,
but a normal login does. Perhaps the
password you're using is not the one expected
on this system.

Check /etc/passwd to make sure that nis_user
is really not a local user. If it really is
an NIS user, I'd probably reset the password
(just to make sure), and then do a yppush
from the NIS master server to see if that
gets the new, known-for-sure password out to
all the clients.

Potentially useful info:

Is the system where the login fails really
using NIS (as a client)?

Does "ypcat passwd | grep nis_user" look
reasonable on that system?

Does "ypwhich -m" show a reasonable NIS
server for the passwd map(s)?

[vineshn]

Thanks Steven,
> su - nis_user" doesn't need the password,
>but a normal login does. Perhaps the
>password you're using is not the one >expected
>on this system.

" it is true i agree with that, but my case is different nis_user is not a local user it is login without any issue(if i do through root (su - nis_user)"


>Check /etc/passwd to make sure that nis_user
>is really not a local user. If it really is
>an NIS user, I'd probably reset the password
>(just to make sure), and then do a yppush
>from the NIS master server to see if that
>gets the new, known-for-sure password out to
>all the clients.


"nis-user is not a local user, i have tried to change the password. no luck."


Potentially useful info:

>Is the system where the login fails really
>using NIS (as a client)?

"yes, problem with nis account if i create a local user i am able to login through telnet..."

>Does "ypcat passwd | grep nis_user" look
>reasonable on that system?

yes i am getting the nis_user details.

>Does "ypwhich -m" show a reasonable NIS
>server for the passwd map(s)?
"yes i am getting passwd.byname blrnis"


note: even i tried with "set_parms initial", no luck.



--vinesh

[Generic User OI IIS]

Hi Vinesh,
did you create the homedirectory on the server?
Regards,
Addie.

[vineshn]

yes home directory is mounted in the local machine.
bash-2.04# ypcat passwd |grep nis_user
nis_user:******:1005:1000:nis_user :/home/systems/nis_user:/usr/bin/csh


as root i am loging as nis_user


bash-2.04# su - nis_user

(c)Copyright 1983-2000 Hewlett-Packard Co., All Rights Reserved.
(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California
(c)Copyright 1980, 1984, 1986 Novell, Inc.
(c)Copyright 1986-1992 Sun Microsystems, Inc.
(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology
(c)Copyright 1989-1993 The Open Software Foundation, Inc.
(c)Copyright 1986 Digital Equipment Corp.
(c)Copyright 1990 Motorola, Inc.
(c)Copyright 1990, 1991, 1992 Cornell University
(c)Copyright 1989-1991 The University of Maryland
(c)Copyright 1988 Carnegie Mellon University
(c)Copyright 1991-2000 Mentat Inc.
(c)Copyright 1996 Morning Star Technologies, Inc.
(c)Copyright 1996 Progressive Systems, Inc.
(c)Copyright 1991-2000 Isogon Corporation, All Rights Reserved.


RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the U.S. Government is subject to
restrictions as set forth in sub-paragraph (c)(1)(ii) of the Rights in
Technical Data and Computer Software clause in DFARS 252.227-7013.

Hewlett-Packard Company
3000 Hanover Street
Palo Alto, CA 94304 U.S.A.

Rights for non-DOD U.S. Government Departments and Agencies are as set
forth in FAR 52.227-19(c)(1,2).

Open Source Software has been installed on this system. See
/opt/OpenSource/etc/copyright
[1] % pwd
/home/systems/nis_user
[2] % id
uid=1005(nis_user) gid=1000(systems)
[3] %

as i do it as telnet (password which i am typing is correct)

HP-UX blrqa8 B.11.11 U 9000/785 (tb)

login: nis_user
Password:
Login incorrect

Wait for login retry: ..
login:



-Vinesh
-----------

[Steven Schweda]

> [...] i have tried to change the password. no luck.

How did you try? Where? What, exactly, does
"no luck" mean in this case. As usual,
actual commands with actual error messages
might be more helpful than vague
descriptions.

I assume that nis_user is a local user on the
NIS master server. You should be able to
change the password there, and you should be
able to log in as nis_user there.

When you change its password, I'd guess that
you could see a change in the encrypted
password field in /etc/passwd, or
/etc/shadow, or somewhere, and that after
ypmake and/or yppush, you might see a change
in the "ypcat passwd" output. (But I don't
do much with NIS these days, so I wouldn't
bet much on my guesses).

[vineshn]

Hi Steven Schweda,
> [...] i have tried to change the password. no luck.
explaition::
nis server is a linux machine. client is HPUX and nis_user(one of the nis user)

i have changed the passwd in nis_user at nis server and pushed to all nis_client.

with the same password and username i am albe to login with other nis client machines like linux,HPUX and solaris machines

after changing the password i am not able to login to this particular HPUX machine.

Have you got my point...???


and there is no error messege than "Login incorrect"

-Vinesh

[MarkSyder]

What happens if you log in as root then type:

grep nis_user /etc/passwd

substituting the real user name for nis_user?

Mark Syder (like the drink but spelt different)

[vineshn]

Mark,
i will replace nis_user as vinesh
in the nis.client machine logged in as root.

bash-2.04# grep vinesh /etc/passwd
bash-2.04#

in the nis.server

bash-2.04# grep vinesh /etc/passwd
vinesh:******:1005:1015:nis_user :/home/systems/vinesh:/usr/bin/csh

[MarkSyder]

What is the result of ypwhich on the client?

Mark

[VK2COT]

Hello,

Something does not look right.

You said that when you su(1) to vinesh on
your NIS client it works. From what I can see,
the GID for user vinesh is 1015.

On the other hand, when you checked vinesh on
NIS server, the GID was different (1000).

Just to be safe,
could you please do the following:

a) Run this on NIS master:

ypmatch vinesh passwd
ypcat -k passwd |grep vinesh

b) Run this on NIS client:

ypmatch vinesh passwd
ypcat -k passwd |grep vinesh
ypwhich -m passwd
grep passwd /etc/nsswitch.conf

c) Does this command work properly
on NIS master:

ypxfr passwd

d) One more idea: what does NIS master
think is the IP address for this
NIS client? Check /etc/hosts and "ypcat hosts" on NIS master.

It looks to me that either the password
map was not propagated to this NIS client,
or something is corrupt.

Cheers,

VK2COT