Unable to change password at NIS clients

vikas027 · 03-26-2011, 03:10 AM

Hi All,

I have not got a chance to play with NIS enough except basic RHCE stuff.

I have some CENTOS 5.5 boxes on which I have set up NIS+AutoFS

All is working pretty well except NIS users can not change password at NIS clients.

I am getting this error.

Quote:

[vicky@box2 ~]$ passwd
Changing password for user vicky.
Changing password for vicky
(current) UNIX password:
New UNIX password:
BAD PASSWORD: it is too short
New UNIX password:
Retype new UNIX password:
NIS password could not be changed.
passwd: Failed preliminary check by password service

I have checked yppasswd service is running on both NIS Server and NIS Clients.

Code:

####### SERVER
[root@box1 yp]# service yppasswdd status
rpc.yppasswdd (pid 3835) is running...

####### CLIENT
[root@box2 ~]# service yppasswdd status
rpc.yppasswdd (pid 3756) is running...

I could not anything relevant (or fishy) in /var/log/secure

Any ideas what I am missing ?

Thanks in advance.

Reuti · 03-27-2011, 12:16 PM

Are you using the default /etc/passwd or put all in /etc/yp/passwd? I had to change PAM to add nisdir=/etc/yp in the password rules.

vikas027 · 03-27-2011, 03:17 PM

Quote:

Originally Posted by Reuti

Are you using the default /etc/passwd or put all in /etc/yp/passwd? I had to change PAM to add nisdir=/etc/yp in the password rules.

I am using /etc/passwd only.

Could you please throw some light on how to do this ? Thanks in advance.

Reuti · 03-28-2011, 08:54 AM

It was just to edit /etc/pam.d/common-password in openSUSE which contains:

Code:

password        requisite       pam_pwcheck.so	nullok cracklib nisdir=/etc/yp
password        required        pam_unix2.so	use_authtok nullok nisdir=/etc/yp
password        required        pam_make.so     /var/yp

Do you have any entry in the messages/warn files: both, NIS-client and NIS-server?

I think it’s port 774 - do you run any firewall on the NIS-server (for me it’s inside the cluster, hence there is no firewall except on the client to the outside world).

vikas027 · 04-05-2011, 01:23 PM

Quote:

Originally Posted by Reuti

It was just to edit /etc/pam.d/common-password in openSUSE which contains:

Code:

password        requisite       pam_pwcheck.so    nullok cracklib nisdir=/etc/yp
password        required        pam_unix2.so    use_authtok nullok nisdir=/etc/yp
password        required        pam_make.so     /var/yp

Do you have any entry in the messages/warn files: both, NIS-client and NIS-server?

I think it’s port 774 - do you run any firewall on the NIS-server (for me it’s inside the cluster, hence there is no firewall except on the client to the outside world).

Hi Reuti,

Thanks for the response and apologies for the delay.

Neither I have file "/etc/pam.d/common-password" in my CentOS 5.5 box, nor I have this directory - "/etc/yp"