Bug 7620 – failure to authenticate when remote NIS server is configured for C2 security

Bug 7620 - failure to authenticate when remote NIS server is configured for C2 security

Summary:	failure to authenticate when remote NIS server is configured for C2 security

Status:	CLOSED CURRENTRELEASE

Aliases:	None

Product:	Red Hat Linux
Classification:	Retired
Component:	ypbind (Show other bugs)
Sub Component:
Version:	6.0
Hardware:	i386 Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Cristian Gafton
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	1999-12-06 00:28 EST by dnelson
Modified:	2008-05-01 11:37 EDT (History)
CC List:	0 users

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2000-01-27 14:25:53 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description dnelson 1999-12-06 00:28:50 EST

Currently our NIS servers are on Sol 2.6 machines in which NIS uses the
shadow.adjunct file (ie C2 security).  This makes the shadow information
unretreiveable via typical NIS methods since the NIS database files are not
generated.  RH 6.0 thus fails to authenticate using this method of NIS
security.

I contacted the author/maintainer of yp-tools (Thorsten Kukuk
<kukuk@vt.uni-paderborn.de>) and per his suggestion, I tried SuSE 6.2 which
properly authenticated logins via NIS using the above configuration.

Comment 1 Cristian Gafton 2000-01-27 14:25:59 EST

A newer version of ypbind should fix this problem.

Comment 2 dnelson 2000-02-03 17:15:59 EST

This authentication failure is also present in RH 6.1.  By default, 'login' uses
the PAM module 'pam_pwdb.so'.  In order to use C2 enabled NIS, one must edit
/etc/pwdb.conf so that the 'nis' entries read 'decnis'.  This is documented
/usr/doc/pwdb-xxx.

	/\/elson

Note You need to log in before you can comment on or make changes to this bug.