NIS+ - Changing a user's forgotten password as root.

From: LOEWENTHAL Simon (sloewenthal@gemini.edu)
Date: Tue Apr 20 2004 - 11:17:46 EDT


Hi there,

Does anyone know the correct and sure way of changing a normal NIS+ user's
password, when they do not know their original password.
The problem with the procedure below is this:

[root@RMS]nis$ nispasswd Guest
New password:
Re-enter new password:
NIS+ password information changed for Guest

The NIS+ credential information for GuestI will not be changed.
User GuestI must do the following to update his/her
credential information:
Use NEW passwd for login and OLD passwd for keylogin. ---- How? They have
forgotten their password! ---
Use "chkey -p" to reencrypt the credentials with the
new login passwd.
The user must keylogin explicitly after their next login.

[root@aguila]nis$ telnet RMS
Trying 172.16.5.10...
Connected to RMS.
Escape character is '^]'.
login: Guest
Password:
Login incorrect --- Well that failed, even though it tells me to login
with the NEW passwd for login!!

I have tried using the passwd command on the Root Master but as you can see
it falls down because I don't know the user's old password:

passwd GuestI
Enter login(NIS+) password:

I thought that perhaps I should do a keylogin -r on the RMS when I logged
in, but I don't know exactly what that does so I haven't. The only way I
know around this involves deleting and recreating the user's credentials.

I really need a sure-fire way of changing passwords as its daft to use a
system that stops you or makes it extremely difficult for the admin account
to reset a normal user's password. I must be missing something?

Regards,
Simon.

---
Simon Loewenthal
Gemini Observatory
Information Systems Group
Video 139.229.33.88
Voice +56 51 205610
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.661 / Virus Database: 424 - Release Date: 19/04/2004
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:28:29 EDT