Conference turris::digital_unix

9183.0. "C2: using edauth to move local accounts to NIS?" by MUNICH::ERNST () Fri Mar 14 1997 09:21

Hello,

I have a question regarding C2 and NIS on dUNIX V4.0.

I have setup C2 using secsetup, converting the local passwd to Enhanced
Security Local Password Database. Then according to the Manual, chapter 9.3.3,
I have setup a NIS Master Server and created the NIS databases with 
#convuser -Mc

Then I use dxaccounts to create an account in the local password database.
I can test whether this account exists.
For example:
 
# /usr/tcb/bin/edauth -Lg jaeger
jaeger:u_name=jaeger:u_id#343:u_pwd=*:u_succhg#0:\
       :u_unsucchg#856534232:u_pwdict=lC1Fl4wl2VM6k:u_oldcrypt#2:u_suclog#856462728:\
       :u_suctty=INET#jaeger@d:u_unsuctty=ttyp0:u_unsuclog#856534232:u_numunsuclog#5:\
       :u_lock@:chkent:

# /usr/tcb/bin/edauth -Ng jaeger
Couldn't find entry named "jaeger"

# cat /etc/passwd | grep :343:
jaeger:*:343:94:Gottfried Jaeger:/u/jaeger:/usr/local/bin/tcsh

# cat /etc/yp/src/passwd | grep :343:

You see, this user exists in the local database, but not in the NIS database.

Now I want move this user from the local to the NIS database, according to
the Manual, chapter 9.3.6
"To move existing local accounts to NIS, use the following command:
 # edauth -Lg | edauth -NsC "

If I use this command I get an error message:

# /usr/tcb/bin/edauth -Lg jaeger | /usr/tcb/bin/edauth -NsC
Error during write of entry named "jaeger"

Did I miss something? What is the correct way to move users from local to
NIS database?

Any help is appreciated.

Regards. Maria 

    Is someone out who ever used
    	# edauth -Lg | edauth -NsC
    
    Thanks. Maria
    

Sounds like you didn't set up the NIS master correctly.
From the Network Admin and security manuals:
    Create a passwd file containing the accounts you want distributed,
        put it in /var/yp/src (to distribute all accounts just copy
/etc/passwd)
    Put any other files (hosts, group, etc) that you want distributed
        into /var/yp/src
    Run nissetup on the NIS master, make sure that you specify the -s option
    (up to here, all standard stuff for setting up NIS master)
    use "convuser -Mc" to create the initial prpasswd map
    (from section 9.3.3.2 of the V4.0 Security Guide)

Now, if you want to move a single user from local to map, use the command
you were using, on the NIS master.  That command will not work to create the 
prpasswd map, only to add to it.  Also, it will only work on the NIS master.
[Posted by WWW Notes gateway]

Using dxaccounts, display the Local Users view and the NIS Users view
(using View/New NIS Users). Then you can simply drag and drop 
a user from one view to the other. Using MB1 for the DND moves the user, 
Ctrl-MB1 copies the user.  

One thing to be careful of. The local user's UID might be used by 
some other NIS user. In this case, dxaccounts looks at the Allow Duplicate
UID's user preference to figure out what to do. If dups are allowed, 
the the move will work regardless. If they are disallowed, the move
will still work but assign him the next availble UID. 

			pete