SUMMARY: SSH/NIS (w/passwd.adjunct) on Solaris 9

Well, kids, looks like a bug in Solaris 9...

After talking with some techies in support, they were able to replicate
our problems exactly, and are quite confident that this issue is a bug in
the OE, and that they'll begin work on the fix.  That's what I get for
hanging off the bleeding edge...

Thanks for your suggestions!

Jadrian S. Johnson

---------- Forwarded message ----------
Date: Thu, 13 Jun 2002 09:57:13 -0500 (CDT)
From: Jadrian S. Johnson <jsj@NebrWesleyan.edu>
To: sunmanagers@sunmanagers.org
Subject: SSH/NIS (w/passwd.adjunct) on Solaris 9

Greetings Sun Managers!

We recently installed Solaris 9 on a new server with default installs of
Sun's SSH.  Since we're running in a NIS environment (using the more
secure method - usage of the passwd.adjunct map to store shadow
passwords), we tried to init this new server as a NIS slave in our domain.
Everything went just fine: no errors, no warning.  We are able to ypcat
all maps (including the passwd.adjunct map, if we are root), and we are
able to su to NIS users from the root account.  We can finger NIS users
and everything looks pretty ordinary...until we try to login.

We can't login to the machine using any of our NIS accounts.  SSH, telnet,
login...they all fail with an authentication error.  It seems that, if we
have access to all of the NIS maps, and nsswitch.conf is set to use NIS,
we should be able to login.  We can even change passwords for NIS users
using yppasswd, but we still can't login as a NIS user.

The NIS master is running Solaris 8.  The new machine, ideally, will
become the NIS master for our domain very soon.  But not unless we can
figure out how to let people login.

Any ideas or suggestions would be greatly appreciated.  Watch for a
summary soon.

Best,

Jadrian S. Johnson
Nebraska Wesleyan University
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers