Why add +::-2:60001::: to /etc/passwd when NIS?

[leereg_3]

Why we must append the line
+::-2:60001:::to/etc/passwd
and append the line
+:*:* to /etc/group
what do that mean?


Thanks in advance!

[Patrick Wallek]

For more information on NIS and how to set up a slave server and the reasoning behind the entries in /etc/passwd and /etc/group see the following manual:

http://docs.hp.com/hpux/onlinedocs/B1031-90000/B1031-90000.html

To paraphrase the manual:

/etc/passwd:
+::-2:60001:::
The plus sign (+) causes processes to consult NIS for any user information not found in the local /etc/passwd file.

The -2 in the user ID field restricts the access of people who may attempt to log in using "+" as a valid user name when NIS is not running. Anyone who successfully logs in as "+" will be granted only the access permissions of user nobody.


/etc/group:
+:*:*
The plus sign (+) causes processes to consult NIS for any group information not found in the local /etc/group file. The asterisk (*) in the password field prevents people from using the plus sign as a valid group name if NIS is not running.

The changes you make to the /etc/group file on an NIS slave server are the same changes you make on an NIS client.

[Ravi_8]

+::-2:60001::: in passwd file,
The plus sign (+) causes processes to consult NIS for any user information not found in the local /etc/passwd file.

The -2 in the user ID field restricts the access of people who may attempt to log in using "+" as a valid user name when NIS is not running. Anyone who successfully logs in as "+" will be granted only the access permissions of user nobody.(user nobody's uid will be less than or equal to -2 or greater than or equal to 60001) since unix can create uid's max upto 60000.

+:*:* in group file,
The plus sign (+) causes processes to consult NIS for any group information not found in the local /etc/group file. The asterisk (*) in the password field prevents people from using the plus sign as a valid group name if NIS is not running.

[leereg_3]

Thanks a lot for your kind help!

Have a nice day!