[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference turris::digital_unix

Title:DIGITAL UNIX(FORMERLY KNOWN AS DEC OSF/1)
Notice:Welcome to the Digital UNIX Conference
Moderator:SMURF::DENHAM
Created:Thu Mar 16 1995
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:10068
Total number of notes:35879

9052.0. "NIS:yppasswd on V4.0 slave doesn't work" by MUNICH::CUZUM () Thu Mar 06 1997 04:28

Hello NIS-wizards,

my customer has a NIS-domain with a V3.2c master and a V3.2c
slave-server. Now he set up a V4.0 slave server. When he wants to
change the password of an user using yppasswd from the V4.0 slave server
he gets:

slave4.0> yppasswd
Changing NIS password for volz
Password unchanged.

The same command works fine from the V3.2c slave server.

I checked everything that came in my mind: the master knows the server
and vice versa, when you change some password direct on the master or
from the other server the database in /var/yp/DOMAINNAME gets updated on
the V4.0 Slave, too. The /etc/hosts is ok. There are no hanging temprary
files (like ptmp or so) in /etc or /var/yp/src. We configured the V4.0
machine as a NIS-client -> it did the same as above, when we attempted
to change a password. We reconfigured it again as slave-server -> again
it doesn't work. Is this a bug or has anyone any ideas what is wrong or
what we can check?

Thanks in advance,

Corina
T.RTitleUserPersonal
Name
DateLines
9052.1one ideaGERUND::WOLFEI'm going to huff, and puff, and blow your house downThu Mar 06 1997 12:206
Did you use the same password in all your tests? I'm pretty sure
I saw this problem when I had a password longer than 8 characters. 
passwd silenty truncates the password to 8 but yppasswd didn't
and gave this error. 

			pete
9052.2it works with V3.2c, why not on V4.0 ?MUNICH::CUZUMFri Mar 07 1997 03:496
    Hi, Pete,
    
    I didn't check for password-length, but if it's the password, would it
    work from V3.2c slaves but not from V4.0 slaves?
    
    Corina
9052.3GERUND::WOLFEI'm going to huff, and puff, and blow your house downFri Mar 07 1997 13:265
If it was the exact same (long) password in all cases, then yes, I would
expect it to fail for 3.2 and 4.0. That's why I asked if you 
kept it the same across all the tests. 

			pete
9052.4doesn't work with short passwordMUNICH::CUZUMMon Mar 17 1997 03:137
    I let the customer test it with a 5-character password and again it
    didn't work. Any other ideas please?
    
    Thanks,
    
    Corina
    
9052.5NETRIX::"[email protected]"Ann MajeskeMon Mar 17 1997 12:037
If you use the -S flag, make sure that the slave server name is entered
correcly on the master server NIS args, and the master server name is 
entered correctly on the slave server NIS args (in /etc/rc.config).

Did you follow the instructions in section 7.4.1 - Adding an NIS Slave
Server to a Domain, in the V4.0 Network Administration Guide?
[Posted by WWW Notes gateway]
9052.6yppasswd still doesn't workMUNICH::CUZUMMon Mar 24 1997 10:3316
    I let the customer reinstall everything according to the manual. He
    send me a protocoll he made with the script-command and everything
    looked ok. I found out that his /usr/bin/yppasswd had no suid-bit. I
    let him set the suid-bit on /usr/bin/yppasswd to have the correct
    permissions, but again it didn't work.
    We checkt all entrys for the master and slave system but found no
    mistake.
    I even managed to install here a V4.0 Slave Server, but couldn't
    reproduce his problem. So it isn't a bug. Seems to be a configuration
    problem. Now I ran out of ideas, I don't know what else I could check
    and I'm desperate!!!! 
    Please, has anyone any idea?
    
    Desperately,
    
    Corina
9052.7root can do yppasswd on the slave serverMUNICH::CUZUMMon Mar 24 1997 10:457
    I forgot to say, that the customer let me know, he can change passwords
    for users an the slave server, when he logs in as root. But it should
    also wotk that users change their own passwords.
    
    Still desperately,
    
    Corina
9052.8NETRIX::"[email protected]"Ann MajeskeTue Mar 25 1997 11:4717
The yppasswd command does not need setuid to work.  The protections/ownership
of yppasswd should look something like:
    % ls -als /usr/bin/yppasswd
    -rwxr-xr-x   1 bin      bin         24576 Nov 15 22:10 /usr/bin/yppasswd

From your original description, it looks like the customer is never getting
the prompt to enter the old password.  I looked at that section of source
code, and if it is true that your customer is never getting the prompt for
the old password, the line of code that is "failing" is:
     if((fi = fopen("/dev/tty", "r+")) == NULL)
Most likely this is an indication of a problem with the ownership/permissions
of the terminal (or pseudoterminal) the customer is using to try to change 
the password.  Also, note that you are required to use an interactive terminal

to change the password, you can't do it from a script.

[Posted by WWW Notes gateway]