NIS+ problem with user login ("...permissions too tight")

From: Adrian Gschwend (adrian.gschwend@hta-bi.bfh.ch)
Date: Thu Sep 18 2003 - 08:01:54 EDT


Hi Admins,

We have a strange problem with our NIS+ autentication in our
Solaris-Network. I started to work here three weeks ago and I always had
problems logging in on some Solaris 8 boxes. Most of the time I get the
following error when trying to login:

NIS+ permissions are too tight, please inform your administrator.

Afterwards I get the "login failed" message.

I could "resolve" the problem with a simple trick: I did a login on one
of the few boxes that didn't complain, then I changed the password and
like this it was possible to login on other machines as well, at least
for some time. When the machine got rebooted it didn't work anymore,
also after some time it didn't work, regardingless of reboot or not
(sounds like niscache problem to me).

First it was just my user, later we found out that there are some other
users with exact the same problem, on some machines login works, on
others it doesn't. Since monday we have users that can't login anymore
*at all*. On none of the machines. They also don't get the "... too
tight" message but simply a "login failed". Those users exist for a long
time and all of them were able to login until end of last week.

The problem is that we didn't change anything at all this weekend, there
are no new patches and no changes in configuration of NIS+.

I searched sunsolve and google but without luck, I am quite sure that
primary and replica NIS+ servers are in sync, at least all nisping
signatures tell that. I did a cleanup of nis+ cache but that didn't help
either. The only two machines that allow me to login now are primary
NIS+ server and its replica, clients won't work anymore.

Our patchlevel is 108993-22

I did all described in ID21041 (Sunsolve) to check whether the servers
are in sync or not.

I will summarize to the list.

Thanks!

-- 
Adrian Gschwend
System Administrator
Biel School of Engineering and Computer Science
Biel, Switzerland
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:08 EDT