LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-18-2005, 10:39 AM   #1
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Rep: Reputation: 0
Users can't login into NIS Client


Big Picture:

Trying to configure NIS Client...
Fedora Core 3
ran authconfig to configure NIS, works. Upon reboot I see that it connected to NISDOMAIN [OK].
I can ypcat passwd.byname, no problem. Gives list of user info
edited /etc/passwd with "+:::::"
edited /etc/nsswitch.conf and made sure "files nis" is listed in passwd, shadow, group
edited /etc/nsswitch.conf and made sure "files nis dns" is listed in hosts
Setup telnet, I can log in with local accounts (i.e. root), no problem

*** I can't log in with any of the accounts listed on the NIS server, only local accounts work...." please tell me I've over looked something simple...

Thanks ahead of time...

P.S. This is the 3rd NIS client in the system... all other NIS clients works fine (but that aren't FC3, they are FreeBSD). So I know the NIS server works fine!

Last edited by mrsharky; 02-18-2005 at 10:42 AM.
 
Old 02-18-2005, 12:51 PM   #2
cjcox
Member
 
Registered: Jun 2004
Posts: 307

Rep: Reputation: 42
Do you have a +::0:0:0:::: at the end of your /etc/shadow?
Probably want the +::: on /etc/group as well.
 
Old 02-18-2005, 07:00 PM   #3
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Original Poster
Rep: Reputation: 0
I do have the "+:::" in the /etc/groups but I'm failing to find a "/etc/shadow" that you are referring to. The only thing I show is a /etc/shadow- file. Any more suggestions? I'm puzzled beyond belief....

thanks
-R
 
Old 02-18-2005, 08:27 PM   #4
aznluvsmc
Member
 
Registered: Aug 2004
Location: Newmarket, Ontario
Distribution: OpenSuse 10.2
Posts: 184

Rep: Reputation: 30
Your nsswitch.conf file should have nis listed as the first option not files.
 
Old 02-18-2005, 09:58 PM   #5
cjcox
Member
 
Registered: Jun 2004
Posts: 307

Rep: Reputation: 42
Quote:
Originally posted by mrsharky
I do have the "+:::" in the /etc/groups but I'm failing to find a "/etc/shadow" that you are referring to. The only thing I show is a /etc/shadow- file. Any more suggestions? I'm puzzled beyond belief....

thanks
-R
I'm puzzled too. I mean if you're running Unix from 1985, that's one thing... but I don't
recall any relatively recent Linux not having an /etc/shadow file. Weird.
 
Old 02-18-2005, 10:00 PM   #6
cjcox
Member
 
Registered: Jun 2004
Posts: 307

Rep: Reputation: 42
And yes.. the nsswitch.conf things mentioned above is important. I prefer
to run with compat, but if you do run with

passwd: files nis
group: files nis

You should be able to use NIS without having those + lines at
the end of the file.

Myself, I prefer

passwd: compat
group: compat

This allows you to selectively allow users and group on the
client and also allows you to alllow/disallow netgroups setup
inside of NIS.
 
Old 02-21-2005, 09:31 AM   #7
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Original Poster
Rep: Reputation: 0
still stumped!!
 
Old 02-21-2005, 09:38 AM   #8
aznluvsmc
Member
 
Registered: Aug 2004
Location: Newmarket, Ontario
Distribution: OpenSuse 10.2
Posts: 184

Rep: Reputation: 30
Did you change your /etc/nsswitch.conf file to
passwd: nis files
group: nis files

Have you found the /etc/shadow file?
 
Old 02-21-2005, 09:30 PM   #9
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Original Poster
Rep: Reputation: 0
I did change my /etc/nsswitch.conf file as your suggested. I found the shadow file.. for some reason, I don't know why I didn't see it earlier. I just can't understand that after all the changes/help that I've recieved that it doesn't work. It still seems like its looking for the YP/NIS login creditials locally and never on the NIS server. Strange...

Is there some sort of coping of information that I forgot to do from the NIS server? When I do the "ypcat passwd.byname" I see the entire list from the NIS server.

Here's another thing I'd like to mention... when I run "authconfig" I have "Use NIS", "Use MD5 Passwords" and "Use Shadow Passwords" selected. Anything wrong there?? I'm truely greatful for all you guys help, cause I know we'll get this thing figured out.

Last edited by mrsharky; 02-21-2005 at 09:42 PM.
 
Old 02-21-2005, 09:50 PM   #10
aznluvsmc
Member
 
Registered: Aug 2004
Location: Newmarket, Ontario
Distribution: OpenSuse 10.2
Posts: 184

Rep: Reputation: 30
First of all rename the /etc/shadow- file to /etc/shadow. Then reboot all the machines and test your NIS cllient. If that fails, post the output of the following:

"domainname" command on both client and server

/etc/yp.conf file of client

"ifconfig" output of server and client

/etc/nsswitch.conf file of client
 
Old 02-22-2005, 10:35 AM   #11
cjcox
Member
 
Registered: Jun 2004
Posts: 307

Rep: Reputation: 42
Quote:
Originally posted by mrsharky

Here's another thing I'd like to mention... when I run "authconfig" I have "Use NIS", "Use MD5 Passwords" and "Use Shadow Passwords" selected. Anything wrong there?? I'm truely greatful for all you guys help, cause I know we'll get this thing figured out.
MD5 of course is not universally standard with regards to NIS. Should work in the confines of a pure Linux only network, may not work in a mixed network with other *ix hosts.

Do you see the encrypted password in your passwd map (ypcat passwd)?
If not, then you've created a non-standard NIS where shadow is probably also being pushed as a map. Again, that is non universally standard, so it can be made to work in a pure Linux network, but not necessarily with a mixed network.
 
Old 02-23-2005, 09:06 AM   #12
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Original Poster
Rep: Reputation: 0
I don't see the encrypted password in the passwd file, I just see a "*" in it's place. Here is an example of what I see:

yptest:*:9001:500:Yp test:/home/kitty/place/yptest:/bin/tcsh

I just found out that all the other clients (and server) are BSD. Does this put a twist on things??

Last edited by mrsharky; 02-23-2005 at 09:24 AM.
 
Old 02-23-2005, 10:27 AM   #13
cjcox
Member
 
Registered: Jun 2004
Posts: 307

Rep: Reputation: 42
Remember... I'm talking about the map... ypcat passwd and not the source /etc/passwd. If /etc is the source directory for your map creates, then ideally your /var/yp/Makefile will take care of joining the /etc/shadow encrypted passwords into the yp passwd map ultimately. So that when you do a ypcat passwd, you'll see the encrypted password strings... the whole map thing is relevant to just the yp server (if that isn't clear).

Did that document I pointed you to help? I'm asking, because I wrote it.
 
Old 02-23-2005, 08:31 PM   #14
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Original Poster
Rep: Reputation: 0
I'm pretty sure that we are talking about the same time (ypcat passwd). Just to confirm: when I'm on the Fedora Core 3 NIS client, I can type "ypcat passwd" and a listing of all the users that have accounts on the BSD NIS SERVER scroll down. Now, this output (from what I understand to be correct) is supposed to be different that what is on the local computer (Fedora Core 3). Just to reiterate, I don't believe there is a problem with the NIS Server (BSD) because there are 3 other NIS clients (also BSD) communicating perfectly with the NIS server.

As mentioned below, when I type "ypcat passwd" I see about 60 (because that's how many users have accounts) lines that have this type of format:

asmith:*:9000:500:Adam Smtih:/home/kitty/place/asmith:/bin/tch
yptest:*:9001:500:Yp test:/home/kitty/place/yptest:/bin/tcsh
.
.
.

I looked back at the posts, but apparently, I'm a little blind, because I don't know what document in which you are referring to.
 
Old 02-24-2005, 09:45 AM   #15
mrsharky
LQ Newbie
 
Registered: Feb 2005
Posts: 19

Original Poster
Rep: Reputation: 0
I just noticed this... according to this tutorial (very nicely done), http://www.linuxhomenetworking.com/linux-adv/nis.htm

it states that when you type "ypcat passwd" your output should look something like this:

nisuser:$1$Cs2GMe6r$1hohkyG7ALrDLjH1:505:100::/home/nisuser:/bin/bash
quotauser:!!:503:100::/home/quotauser:/bin/bash
ftpinstall:$1$8WjAVtes$SnRh9S1w07sYkFNJwpRKa.:502:100::/:/bin/bash
www:$1$DDCi/OPI$hwiTQ.L0XqYJUk09Bw.pJ/:504:100::/home/www:/bin/bash
smallfry:$1$qHni9dnR$iKDs7gfyt..BS9Lry3DAq.:501:100::/:/bin/bash

but when I type the same thing mine has the "*" in place of the hashed password field. ie.

nisuser:*:505:100::/home/nisuser:/bin/bash
quotauser:!!:503:100::/home/quotauser:/bin/bash
ftpinstall:*:502:100::/:/bin/bash
www:*:504:100::/home/www:/bin/bash
smallfry:*:501:100::/:/bin/bash

I would assume that this problem has to due with authentication between the two different systems (BSD and FC3)?!?!?!?!

Last edited by mrsharky; 02-24-2005 at 11:37 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
NIS prob: added user to server, but can't login to client BrianK Linux - General 3 10-06-2004 04:29 PM
How to setup a solaris NIS client while with a Linux NIS server? ntcm Linux - Security 2 03-31-2004 12:43 PM
How to setup a solaris NIS client while with a Linux NIS server? ntcm Linux - Networking 1 03-31-2004 07:51 AM
How to setup a Solaris NIS client while with a Linux NIS server? ntcm Linux - General 1 03-31-2004 06:10 AM
nis client login - user home dir not fnd synfield Linux - Networking 0 03-27-2003 03:51 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 11:11 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration