Can root change NIS password of any user ?

Can root change NIS password of any user ?

Post by Kit-pui Wo » Thu, 27 May 1999 04:00:00



The root can change a local (non-NIS) password of any user.
However, can the NIS password of a user also be changed
similarly ?

yppasswd cannot do because it will prompt for the user's
old password.  Is there any way round ?

Please drop me any hint by email

Many thanks in advance !
KiT

 
 
 

Can root change NIS password of any user ?

Post by kris » Thu, 27 May 1999 04:00:00



> The root can change a local (non-NIS) password of any user.
> However, can the NIS password of a user also be changed
> similarly ?

> yppasswd cannot do because it will prompt for the user's
> old password.  Is there any way round ?

this is for security reasons impossible...
just login you're main NIS server do a change passwd remake the passwd
map and redistribute...

 
 
 

Can root change NIS password of any user ?

Post by Volker Borche » Thu, 27 May 1999 04:00:00


|> The root can change a local (non-NIS) password of any user.
|> However, can the NIS password of a user also be changed
|> similarly ?
|>
|> yppasswd cannot do because it will prompt for the user's
|> old password.  Is there any way round ?

On the NIS server, do

# passwd -l -F /your/nis/source/dir/passwd username
# cd /var/yp
# make passwd.time netid.time

(this is on 4.1.4, check the manual page for 5.x)

--



 
 
 

Can root change NIS password of any user ?

Post by Timothy J. L » Thu, 27 May 1999 04:00:00


|The root can change a local (non-NIS) password of any user.
|However, can the NIS password of a user also be changed
|similarly ?
|
|yppasswd cannot do because it will prompt for the user's
|old password.  Is there any way round ?

Are you doing it as root on the NIS master server?

--
------------------------------------------------------------------------

Unsolicited bulk or commercial email is not welcome.             netcom.com
No warranty of any kind is provided with this message.

 
 
 

Can root change NIS password of any user ?

Post by herl.. » Wed, 02 Jun 1999 04:00:00




> The root can change a local (non-NIS) password
of any user.
> However, can the NIS password of a user also be
changed
> similarly ?

> yppasswd cannot do because it will prompt for
the user's
> old password.  Is there any way round ?

> Please drop me any hint by email

> Many thanks in advance !
> KiT

hmmm.. unless my rapidly depleting braincells
deceive me, doing a yppasswd <username> on your
nis server should enable you to change a person's
nis passwd.

Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

 
 
 

Can root change NIS password of any user ?

Post by Kit-pui Wo » Fri, 04 Jun 1999 04:00:00


I have just found a solution.
I edit the YP's passwd file (passwd.nis) with
vi, blank the user password field.

Then quit vi, do yppasswd <user>, press <enter>
when promoting for old password. Finally enter
the new password twice.
That's all.

Thanks to all friends here for your helps.

KiT

: hmmm.. unless my rapidly depleting braincells
: deceive me, doing a yppasswd <username> on your
: nis server should enable you to change a person's
: nis passwd.

: Sent via Deja.com http://www.deja.com/
: Share what you know. Learn what you don't.

 
 
 

Can root change NIS password of any user ?

Post by Heiko Klei » Thu, 10 Jun 1999 04:00:00



> I have just found a solution.
> I edit the YP's passwd file (passwd.nis) with
> vi, blank the user password field.

>.....

Well, that's exactly what I've been doing.

Quote:

> : hmmm.. unless my rapidly depleting braincells
> : deceive me, doing a yppasswd <username> on your
> : nis server should enable you to change a person's
> : nis passwd.

And this is possible after several patches. (I made a Y2K upgrade and
installed all recommended, security and Y2K patches, and it started
working this way.)

Heiko

 
 
 

Can root change NIS password of any user ?

Post by Christopher M. Arnol » Tue, 22 Jun 1999 04:00:00


Provided you are root on the NIS master, you can change a password for any
user through various methods (passwd command with options, vipw to manually
change entry, etc.).  If you are not root on the NIS master but for SOME
reason the user is in the local passwd file and /etc/nsswitch.conf always
checks files before NIS and you are root on the local machine then you can
change it locally and ignore NIS.  Not the best of ideas but it is possible.

>The root can change a local (non-NIS) password of any user.
>However, can the NIS password of a user also be changed
>similarly ?

>yppasswd cannot do because it will prompt for the user's
>old password.  Is there any way round ?

>Please drop me any hint by email

>Many thanks in advance !
>KiT

 
 
 

1. NIS+ user management [Was: Re: root changing a user's password (NIS)]


And Solaris 2 removed `passwd -f <filename>'; the "-f" option now
means "force password change at next login".

                                  .  What other ways are there that are safer?

Good question.  I haven't used Solaris 2 at a large site long enough
for it to be much of an issue.  When necessary, I've just done as you
and edited the file by hand (using Emacs, which when saving at least
gives warning if the file's been changed).  Several years ago at Sun,
I recall there being a `viyp' utility for editing NIS files.  Maybe
they made it publically available.  I think it's harder to enforce
such a utility's use than it is to write one. ;-)

On a related note -- what is the recommended/approved/best way to add
new users and remove ex-users to/from NIS+ ??  One would hope `useradd'
could do it -- nope.  The NIS+ utilities `nis{addent,populate}' are
tailored towards adding to NIS+ tables from ASCII files or NIS maps
rather than dealing with a single "user" entry.  And using plain
`nistbladm' and `nisaddcred' options is crude and error-prone.

I've searched to no avail for some "cookbook" method of handling NIS+
user management.  My old NIS+ book was useless for that issue.  Maybe
I just have a blind spot.  Any suggestions would be appreciated...
thanks!

-sjk

--
Scott J. Kramer                         Graham Technology Solutions
Sr. UNIX Systems Administrator          20823 Stevens Creek Blvd., Suite 300

http://www.graham.com                 +1.408.366.8001

2. Motif on Sun X Terminals

3. User password change by root using NIS

4. LG CDROM Problem - CRD-8400B

5. root changing a user's password (NIS)

6. A question about symbolic links

7. Root changing user's NIS+ password, RPC key not updated too

8. Booting a Sun via a Cisco Router

9. changing NIS+ root master root password

10. Changing local root password on box running NIS

11. changing root password on a NIS+ server

12. Changing root password (NIS+)

13. NIS+ - Changing root passwords