NIS+ mail aliases : members of aliases disappearing

From: Dominic Clarke (dominicc@foe.co.uk)
Date: Fri Mar 07 2003 - 05:31:35 EST


Hi SunManagers

WE are running NIS+ , and are finding that we are losing members of
aliases , from
the mail_aliases.org_dir table. I am sure that this is not due to
operator error. A more
detailed summary of the problem follows , thanks in advance for all
assistance.

Dominic Clarke

Friends of The Earth

10:15 , 7.3.2003

Initially we were running NIS+ with YP compatability
on an Ultra1 , running Solaris 2.5.1

Admin of this was done via /usr/bin/solstice , and
on occasions from the command line

In January of this year I upgraded this to Solaris
8 , with Rec & Sec patches from this period. I also
upgraed the PROM. We ran with this upgrade for
a couple of weeks without problems.

I then moved the NIS+ root master to a Sun Blade 100
running Solaris 8 with an identical Rec and Sec patch level.
The hostname and the IP address from the Ultra1 were
transferred to the Blade 100 , and the Ultra1 was
removed from the network.

At the time of moving to the Blade 100 we started to use
/opt/SUNWseam/3_0/bin/admapp instead of Solstice.

Since moving to the new server we have noticed that
usernames have been disappearing from the NIS+ mail
aliases ( mail_aliases.org_dir ). I am satisfied
that this is not due to operator error.

Excerpts from /var/adm/messages :

Feb 6 12:52:15 emys rpc.nispasswdd[152]: [ID 294074 daemon.error]
cannot reencrypt ('DH640-0') creds for 'emilyd'
Feb 6 12:52:15 emys rpc.nispasswdd[152]: [ID 294074 daemon.error]
cannot reencrypt ('DES') creds for 'emilyd'
Feb 6 12:52:15 emys nispasswd[4220]: [ID 204499 user.alert] Password
information is partially updated.

Feb 26 11:06:19 emys nispasswd[12790]: [ID 891360 user.alert] NIS+
system error

Mar 5 13:16:22 emys rpc.nispasswdd[154]: [ID 930059 daemon.error]
rpc.nispasswdd: NIS+ servers unreachable.
Mar 5 13:16:22 emys rpc.nispasswdd[154]: [ID 789720 daemon.error] ...
exiting
...
Mar 5 13:16:29 emys nisd[151]: [ID 295856 daemon.error] can't talk with
resolv
server
Mar 5 13:16:30 emys nisd[151]: [ID 628015 daemon.error] can't set RPC
GSS svc name 'nisd@emys.foe.co.uk' for mech 'diffie_hellman_640_0': RPC
GSS err = 0, sys
err = 0

Mar 5 14:41:42 emys nisd[719]: [ID 476092 daemon.warning] RPC ERROR in
talking
to unix.spolana@foe.co.uk.
Mar 5 15:37:06 emys nisd[151]: [ID 106905 daemon.error] NIS+ server not
responding
Mar 5 15:39:20 emys nisd[954]: [ID 537711 daemon.error] NIS+ server
could not be contacted: RPC: Unable to receive
Mar 5 15:39:20 emys nisd[151]: [ID 537711 daemon.error] NIS+ server
could not be contacted: RPC: Unable to receive
Mar 5 16:40:43 emys login: [ID 665435 auth.alert] Permissions on the
password database may be too restrictive

Mar 6 18:06:02 emys nisd[655]: [ID 915950 daemon.error] nis_list_svc:
callback
to emys.foe.co.uk. returned RPC: Unable to receive
Mar 6 18:06:02 emys nisd[655]: [ID 476092 daemon.warning] RPC ERROR in
talking
to emys.foe.co.uk..
~
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:25:57 EDT