NIS+ user management [Was: Re: root changing a user's password (NIS)]

NIS+ user management [Was: Re: root changing a user's password (NIS)]

Post by Scott J. Kram » Tue, 25 Mar 1997 04:00:00




Quote:> Suppose you are root on an NIS master server (with SunOS 5.5.1).  How
> do you change some other user's NIS password, if:

> 1.  No one knows the user's password (e.g. user forgot his/her password).
> 2.  The password file that NIS uses is not /etc/passwd .

> Editing the password file seems like it would work, except that it could
> create a mess if someone else were changing a password at the same time
> (vipw only works on /etc/passwd)

And Solaris 2 removed `passwd -f <filename>'; the "-f" option now
means "force password change at next login".

                                  .  What other ways are there that are safer?

Good question.  I haven't used Solaris 2 at a large site long enough
for it to be much of an issue.  When necessary, I've just done as you
and edited the file by hand (using Emacs, which when saving at least
gives warning if the file's been changed).  Several years ago at Sun,
I recall there being a `viyp' utility for editing NIS files.  Maybe
they made it publically available.  I think it's harder to enforce
such a utility's use than it is to write one. ;-)

On a related note -- what is the recommended/approved/best way to add
new users and remove ex-users to/from NIS+ ??  One would hope `useradd'
could do it -- nope.  The NIS+ utilities `nis{addent,populate}' are
tailored towards adding to NIS+ tables from ASCII files or NIS maps
rather than dealing with a single "user" entry.  And using plain
`nistbladm' and `nisaddcred' options is crude and error-prone.

I've searched to no avail for some "cookbook" method of handling NIS+
user management.  My old NIS+ book was useless for that issue.  Maybe
I just have a blind spot.  Any suggestions would be appreciated...
thanks!

-sjk

--
Scott J. Kramer                         Graham Technology Solutions
Sr. UNIX Systems Administrator          20823 Stevens Creek Blvd., Suite 300

http://www.graham.com                 +1.408.366.8001

 
 
 

1. root changing a user's password (NIS)

The "-F" option is non-existent in the Solaris 2.x version of
`passwd'.  Not having a Solaris 1.x handy to check, I mistakenly
thought it was "-f" in my earlier posting.

-sjk

--
Scott J. Kramer                         Graham Technology Solutions
Sr. UNIX Systems Administrator          20823 Stevens Creek Blvd., Suite 300

http://www.graham.com                 +1.408.366.8001

2. Two ISPs: call only one of them

3. Root changing user's NIS+ password, RPC key not updated too

4. Floating-point underflow on IBM3090

5. User password change by root using NIS

6. router configuration of a cisco router

7. Can root change NIS password of any user ?

8. Configuring IP Tables

9. NIS+ problem, users can't change their own password!

10. Can't change NIS+ password in NIS+ client

11. NIS/NIS+ password security without user keypairs -- how ???

12. NIS+, User Ghosts, NIS Passwords

13. Login to NIS (yp) client as user shows $USER as root!