Quote:>I have a little problem with my NIS+ setup, but I can't figure out what I did
>wrong. Obvously (to me) it has to do with permissions, but since I didn't
>modifiy any permissions (knowingly), I'm a bit confused. The problem is this:
>Any time a user attempts to change their passowrd, they are greeted with this
>message:
> NIS+ password information changed for testuser
> nispasswd: couldn't change password for testuser.
> Reason: failed to update the cred table with reencrypted credentials.
> Please notify your System Administrator.
>Can anyone tell me what I did wrong? This is the system where the NIS+ master
>is.
One of the following is happening:
(1) Your users don't have credentials.
(2) Your users have credentials, but do not own their own
credentials.
(3) Your users logged in with 'rlogin' or similar protocol without
using a password, and have not gone through keylogin.
I suspect (2) is your problem. Apparently some scripts for adding
users do it wrongly. You can use 'nischown' in individual entries in
the credentials table to correct the problem.
Define $DOMAIN to be your NIS+ domain, including a trailing period.
Use:
niscat -o "[cname=user.$DOMAIN,auth_type=DES],cred.org_dir"
to check on the credential ownership for user. Correct the problem
with
nischown user.$DOMAIN "[cname=user.$DOMAIN,auth_type=DES],cred.org_dir"
by