Very Computer

We have one NIS master server and one slave server (both RS6000-550, AIX
3.1.5).  On the slave server, I renamed /bin/passwd to something else.
Under the name /bin/passwd I installed something which tells people to
please use yppasswd.

Suppose I create a new user.  I use smit, also to give him an initial
password (BTW, why doesn't smit prompt me for that?).  User logs in on
the slave server (he's supposed to, he has his home directory there),
using the initial password, and is immediately asked to change his
password.  He does so.  Later, he logs out and logs in again.  The new
password doesn't work.  He has to use the old initial password and is
again asked to change the password.  This goes on forever or until user
uses yppasswd to really change his password.

I guess the same will happen when a password expires, but we haven't
had the machines long enough for this to happen.

This is clearly not an acceptable situation.  What have I done wrong?

Regards,

| /  |  _       __  | | |  _   _ |     _   _  Klaus Wacker, Exp.Physik V
|/\  |  _\ | | (_   | | |  _\ /  |_)  /_) |   Uni Dortmund, Postfach 500500
|  \_|_(_|_|_|___)  |_|_|_(_|_\__| \_/\___|   D-4600 Dortmund 50
                                              +49 (231) 755 3587

Changing to "expires = 0" under "default:" in /etc/security/user is
one way to solve your problem... :-)

[ details deleted ... ]

Quote:>This is clearly not an acceptable situation.  What have I done wrong?

There are supposed to be APARs since 3.1.5 which deal with problems
with NIS.  The problem is (as you might have guessed) that /bin/passwd
and friends (actually, I think it is the newpass() function) don't
update the NIS servers.
--
John F. Haugh II        | Every 56 days.   | UUCP: ...!cs.utexas.edu!rpp386!jfh

SigVirusGuard 1.1: Don't Post News Without It!  [ now in handy mail size too! ]

Quote:>There are supposed to be APARs since 3.1.5 which deal with problems
>with NIS.  The problem is (as you might have guessed) that /bin/passwd
>and friends (actually, I think it is the newpass() function) don't
>update the NIS servers.

John is correct.
a22470 contains this fix.  Among other things, I changed the passwd and
pwdadm commands to execute yppasswd in the case that the password of
the user in question comes from NIS.

--

My views are unrelated to those of IBM     |        Austin, TX
 "A little rebellion is a good thing now and then" - Thomas Jefferson