SEO

#1 (**permalink**) 01-05-2008, 05:29 AM

Hi all!

I've got what I think is a slightly unusual question for you. I have a
set of boxes that authenticate against an NIS server. One of the users
on the NIS server is a common user that is used to run a specific set
of software. On one of the boxes, I'd like to change that common
user's password to something unique to that local box, while leaving
the password the same on the rest of the boxes.

I see three options for doing this:

1. Using the NIS override capabilities to do something like this:

....local users...
+common:<hashed password>:100:101::
+:0:0::

2. Removing that user from the NIS include on the local box and using a
local entry

....local users...
-common:*:100:101::
common:!:100:101::/usr/bin/ksh
+:0:0::

3. Using the /etc/nsswitch.conf and having the server look at local
files for
user and group info, and defining the user locally.

Adding to this is that this common user uses the automount to mount his
home directory on login. I'd like to keep that capability if I could.

Any suggestions, along with any gotchas I should be aware of, would be
helpful.

Thanks!

#2 (**permalink**) 01-05-2008, 05:29 AM

Joe Wilkicki <jwilkicki@gmail.com> wrote:

> 3. Using the /etc/nsswitch.conf and having the server look at local
> files for
> user and group info, and defining the user locally.

If you define "files nisplus" in /etc/nsswitch.conf for passwd, group
and shadow then local files will be /first/ looked at for logins. Thus
local entries should "overwrite" NIS ones. I'd rather test it
beforehand, anyway.

--
Christian Schulz http://www.spinfo.uni-koeln.de/~schulz/
"find /var/spool/news -mtime -1 -print | xargs less" ist technisch
nicht auf der Hoehe der Zeit.
Kristian Koehntopp auf die Frage, welchen Newsreader man nicht mehmen
sollte. (d.a.arnooo, <7cdg4t$buv@valiant.koehntopp.de>, 1999-03-13)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

Overriding NIS password with local password