[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference turris::digital_unix

Title:DIGITAL UNIX(FORMERLY KNOWN AS DEC OSF/1)
Notice:Welcome to the Digital UNIX Conference
Moderator:SMURF::DENHAM
Created:Thu Mar 16 1995
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:10068
Total number of notes:35879

9591.0. "NIS passwords will not be invalidated (-M overrides -i)" by EEMELI::TERANEN (Pekka Teranen OSS/MCS Finland) Wed Apr 23 1997 04:54

	Hello !

One of our customer is using combination of Digital Unix 4.0B, NIS and 
C2 Security.
The problem is that the convuser command returns error :

# /usr/tcb/bin/convuser -aciuM
NIS passwords will not be invalidated (-M overrides -i)

Convusers man page tells that you can use -M and -i together.
Did customer (and I) understand something wrong or is there
bug in convuser ?

        pekka

T.RTitleUserPersonal
Name
DateLines
9591.1NNTPD::"[email protected]"Ann MajeskeFri Apr 25 1997 12:2011
I looked at the code for convuser, and it deliberately disallows the
combination of -i and -M, so I suspect that the man page is wrong, but
I didn't actually try to track down through the code  and find out
WHY this combination is not allowed.  The message that your customer
received is a warning message, not an error message.  The conversion
from Base to Enhanced maps occurred, the only part that wasn't done
is the invalidation of the passwords in the passwd maps.  You can
do this easily enough by editing the /var/yp/src/passwd file and replacing
the passwords with a "*", then remaking the passwd maps.

[Posted by WWW Notes gateway]
9591.2Hi Ann !EEMELI::TERANENPekka Teranen OSS/MCS FinlandTue Apr 29 1997 05:0628
	Hi Ann and thanks for your reply !

>I looked at the code for convuser, and it deliberately disallows the
>combination of -i and -M, so I suspect that the man page is wrong, but
>I didn't actually try to track down through the code  and find out
>WHY this combination is not allowed.  

I also belive that the problem is actually in man pages but on the 
other hand I can't see any reason why this combination is illegal.
Could you look at the code more spesific or should I do QAR ?
                                                   
>The conversion from Base to Enhanced maps occurred, the only part 
>that wasn't done is the invalidation of the passwords in the passwd maps.  
>You can do this easily enough by editing the /var/yp/src/passwd file 
>and replacing the passwords with a "*", then remaking the passwd maps.

You are right that the coversion basicly works Ok, only the invalidation 
"fails".  In this case the problem is that our customer is Technical 
Unversity and there is a LOT of accounts that they should edit by hand.
I know that they are not very happy about this solution.

If you found any reason why -i and -M don't work together I (and our 
customer) would be very happy !

Many thanks in advance !
          		Pekka