disable login on nis server

disable login on nis server

Post by lared » Fri, 18 Oct 2002 03:26:51



Hello,
i have a nis server, and  it has too many user accounts, my question is how
i can get that a nis user can not login in the nis server?
thank in advance.
Ces
 
 
 

disable login on nis server

Post by Ann Majesk » Sat, 19 Oct 2002 00:19:26


Hi Ces,

I don't understand your question.  Are you asking how you can set
up the NIS server to prevent logins or are you asking why users can't
login?  How do you know that the NIS server "has too many user accounts"?
How many accounts does it have?  How many users do you normally have
logging in at one time?  What OS and version are you running
on the NIS server (and do you have any NIS slave servers?) and NIS clients?

Ann


> Hello,
> i have a nis server, and  it has too many user accounts, my question is how
> i can get that a nis user can not login in the nis server?
> thank in advance.
> Ces


 
 
 

disable login on nis server

Post by lared » Sat, 19 Oct 2002 02:57:10


Hello
i have a nis server, a slave server, and 15 nis client, with around 40
users. Users can validate (login with a telnet session p.e) in nis client
and in nis server (username and password is the same), and i want that users
only login in nis client, not in nis server or slave server.  p.e
nis server ->A
nis slave ->B
nis client ->C
nis user -> john

User john can login in all client and in the nis server and in the nis
slave, and i only want that users only login in nis client.
thanks
Cesar


> Hi Ces,

> I don't understand your question.  Are you asking how you can set
> up the NIS server to prevent logins or are you asking why users can't
> login?  How do you know that the NIS server "has too many user accounts"?
> How many accounts does it have?  How many users do you normally have
> logging in at one time?  What OS and version are you running
> on the NIS server (and do you have any NIS slave servers?) and NIS
clients?

> Ann


> > Hello,
> > i have a nis server, and  it has too many user accounts, my question is
how
> > i can get that a nis user can not login in the nis server?
> > thank in advance.
> > Ces

 
 
 

disable login on nis server

Post by Adam Pric » Sat, 19 Oct 2002 14:51:14




Quote:> Hello
> i have a nis server, a slave server, and 15 nis client, with around 40
> users. Users can validate (login with a telnet session p.e) in nis
> client and in nis server (username and password is the same), and i
> want that users only login in nis client, not in nis server or slave
> server.  p.e nis server ->A
> nis slave ->B
> nis client ->C
> nis user -> john

> User john can login in all client and in the nis server and in the nis
> slave, and i only want that users only login in nis client.
> thanks
> Cesar

Please don't top post.

According to this table from the security manual you should be able to
override the NIS setting on an individual machine.

Table 9-1:  Controlling NIS with Local /etc/passwd Overrides
Symbol     Description

+:         If a user is not found in the local file, authenticate
           using the NIS file.

+username  Local file field overrides NIS. Used for partial distribution.

-username  User is excluded from all matches by local control.

           netgroup(4) reference page.

           reference page.

+:*:       Sends all password requests to the NIS map.

Or you could simply touch /etc/nologin on the master and slave, then only
root will be able to login.

Lastly, have you tried removing the +: from the password file on the master
and the slave.
Then they shouldn't use NIS for authentication but should still serve NIS.

Hth
Adam