rh linux more nis adding users

[Scott_14]

Boy I hate to ask another question, but for somereason I am really drawing blanks.

I have a red hat server, which I set up as a nis master, and I have this sun client, which I set as a client.

I added a user on the Master, and ran the make -C /var/yp which went through and created the maps again. On the sun side, I can do a ypcat passwd and see the id, however when I login to the sun client, I am not able to login.
I do have nis in my nsswitch.conf for passwd, and group, as well as the + in the /etc/passwd file. Am i not doing something else I should be?

Thank you.

[Steven E. Protter]

What about yppush?

It sounds like there is a problem getting the NIS Master information onto that Sun client. I would suggest watching the Sun logs during the ypcat/yppush to see whats going on.

tail -f logfilename

As to asking too many questions. The more the merrier. So long as others useful answers get point assignment there is no reason to feel embarassed about posting questions. None at all. Did you ever hear the one where the only stupid question is the one not asked?

SEP

[K.C. Chan]

Can you check on NIS client, that yp client proc is running and binding to the right NIS domain? If so, make do ypcat on passwd, just to establish that NIS client on this server is working properly?

[Scott_14]

Well, I can do ypcats on the client and see the new entry, as well as do a ypwhich and it knows what the nis server is suppose to be.
I have the nsswitch.conf doing files nis.

But when I log on the client, I am unable to log in, I did some checking on logs and I dont see anything.

[Scott_14]

Well, Ok, now on the master Logs, I do see this:
ypserv[1645]: refused connect from 10.9.28.249:59811 to procedure ypproc_match

Which is the client IP, so something on the client is not allowing me to connect or log in?

[K.C. Chan]

Who are you loggin in as, a regular user or root? I have known sun to not allow root log via remote shell, root can only login at the console. If this is not the case, have you check your hosts.allow file to make sure sshd is not being filter; asumming you are using ssh to log in. Just for sanity check, make sure portmap is running on both server.

[Umapathy S]

scott,
Check your /etc/nsswitch.conf. Did you change it or are you using the default. The default will contain nisplus after the files. Remove nisplus from the entries like

passwd: files nis
shadow: files
group: files nis

hosts: files nis dns

HTH,
Umapathy

[Scott_14]

Hello:

Well here is my rpcinfo:

program vers proto port service
100000 2 tcp 111 rpcbind
100000 2 udp 111 rpcbind
100024 1 udp 32768 status
100024 1 tcp 32768 status
100004 2 udp 975 ypserv
100004 1 udp 975 ypserv
100004 2 tcp 978 ypserv
100004 1 tcp 978 ypserv
600100069 1 udp 984
600100069 1 tcp 986
391002 2 tcp 32769
100009 1 udp 636 yppasswdd
100007 2 udp 900 ypbind
100007 1 udp 900 ypbind
100007 2 tcp 903 ypbind
100007 1 tcp 903 ypbind


Maybe I am doign something wrong, here, I am tring to log in as just a user id, I created the ID on the Linux master, and my nsswitch.conf does have files nis for passwd, shadow, group, and the hosts set, ok, from what I see. However if I try to log onto the sun, I just am unable to log on to it. It knows its domain, and nis server, and i can ypcat to see the id.

I did restart everthing, but still nonthign.

[K.C. Chan]

Just a thought, what version of solaris are you using, because I know for a fact that solaris 9 has ipv6 turned on by default and it drived me crazy trying to figured it out. But after switching it to ipv4 things work great.

[Scott_14]

Well, Sun solairs 5.8
I did a ifconfig on the card, and it shows me ipv4....

This really bugs me, cause doign rpcinfo seems to bring back the correct information, ypcat shows the id, I made sure the firewall was actually off on the linux, is there maybe another security setting that I can shutdown, or check on.

I can see if I was getting home dir issues, but I cant even get it to log in. I did log on the master checking but I can not log to the sun client. boy this one is odd.

[Scott_14]

It is RH9 as well, and the client is solaris 8.
If I can recap:
on the Solaris 8 client.
nsswitch
passwd, hosts, shadow, group
file nis

ypbind is running, rpcinfo -p shows
100000 4 tcp 111 rpcbind
100000 3 tcp 111 rpcbind
100000 2 tcp 111 rpcbind
100000 4 udp 111 rpcbind
100000 3 udp 111 rpcbind
100000 2 udp 111 rpcbind
100007 3 udp 61299 ypbind
100007 2 udp 61299 ypbind
100007 1 udp 61299 ypbind
100007 3 tcp 52501 ypbind
100007 2 tcp 52501 ypbind
100007 1 tcp 52501 ypbind

ypcat passwd shows id of in passwd
ypwhich points to correct master.

RH9
Master:

rpcinfo :

100000 2 tcp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 32768 status
100024 1 tcp 32768 status
100004 2 udp 976 ypserv
100004 1 udp 976 ypserv
100004 2 tcp 979 ypserv
100004 1 tcp 979 ypserv
600100069 1 udp 985 fypxfrd
600100069 1 tcp 987 fypxfrd
391002 2 tcp 32769 sgi_fam
100009 1 udp 658 yppasswdd
100007 2 udp 617 ypbind
100007 1 udp 617 ypbind
100007 2 tcp 620 ypbind
100007 1 tcp 620 ypbind

added a user using useradd
ran make -C /var/yp
it ran ok.

tried to log on the solaris as user.
unable to log in.

On master, did a yppasswd on user
changed passwd

still nonthing.

anything else?

[K.C. Chan]

can you make sure that /etc/default/inet_type is set to DEFAULT_IP=IP_VERSION4

[Scott_14]

I checked, however I do not have this file, should I create it ?

[K.C. Chan · Accepted solution]

Scott, that's not necessary; I guess by defualt solaris-8 has IPV4 as the default. I did some checking and found that NIS has changed quite a bit since last time I had used it. Check if you have a file on your NIS master called " /var/yp/securenets". This file predicate which client can use the NIS master. Let me know how it turns out. Good luck.

[Scott_14]

Hi K.C:

I do appreciate all your time and help. That file is not there, I created it for giggles, and
Made it just 0.0.0.0 like in the example config to make it wide open.

At this point I am stumped. It seems like everything is correct, even finding the passwd entry, I just wander if its some setting either in security preventing a user from loggin on a host. I did shut off the firewall option on the Linux.
At this time, I think I am blank on what else to try, sure seems odd.

Scott

[K.C. Chan]

Scott,
I did ask you aboaut hosts.allow file, did you get a chance to check on both server. If there are entries in their could you list it. If not then make sure hosts.deny is empty. I know sshd uses tcpwrapper and it's configure via the above two file. This is it, I am running out of idea as well. Now I'm very interested on the cause of this problem. If you ever got it resolve, please post it here.

[Scott_14]

Sorry K.C

I did check, and on the linux side, its just empty, and on the sun side, it is not there.

I will post more as I get more, I am going to try and get another system to use if possible, to try and i guess eliminate everthing.

scott

[Dennis Dodds]

We had the same problem with HP-UX clients. Needed to disable shadow passowrds on the RedHat server and all is well.

Dennis