nisplus authentication problem - sent 06Jan, revisited

[Daniel Franke]

Hi there,

Bob Edwards wrote Mon, 06 Jan 2003:
> If nisdefaults runs OK, then try "nismatch someuser passwd.org_dir"
> ("someuser" is replaced by some real username in the NIS+ server
database).
> If all is well, you should see an encrypted passwd entry in the second
field
> (after the first colon) of the output. If you see something like "*NP*"
> instead, then again, the NIS+ server is not giving the password back to
the
> client (doesn't trust it).

Which describes exactly my problem. I've got a Solaris 8 NIS+ Server, one
Solaris 8 client, two runing SuSE 8.1 linux clients - and one (again SuSE
8.1, but this time running within vmware under windows) that doesn't.
Everything seems more or less fine ...
 * I'm able to `niscat <table>` any table (but *NP* in pwd-fields)
 * `nisdefaults` seems fine (sorry, unable to copy-paste)
 * login as local root, then `su - <someuser>` works fine
 * login as user (shell/ssh) fails

Bob say's, the server doesn't trust my client ... *hmm* I added the
credentials as I did before using `nisaddcred -p unix.vmware at mydomain.com -P
vmware.mydomain.com. des`. AS mentioned above, three times this worked
fine?!

I compared: nsswitch.conf, NIS_COLD_START ...
(I believe, I do not use secrpc, so there should not be any timing probs)

Another problem (maybe corellated):
 * booting my vmware-linux, everythings looks good - at first sight
 * directly after boot: `niscat passwd.org_dir`
	-> "passwd.org_dir: Error in RPC-Subsystem"
   (btw, NFS-mount was successful)
 * restart the portmapper
 * again the niscat cmd -> expected output, including *NP*
  (niscat at the working hosts gives a complete list, including the
encrypted pw)

I'm doing this in my spare time ... please, any help would really be
appreciated!
Thnx in advance

	Daniel Franke

--
Dipl.-Math. (FH) Daniel Franke
Institut fuer Medizinische Biometrie und Statistik
Medizinische Universitaet zu Luebeck
Ratzeburger Allee 160, Haus 4
23538 Luebeck
Telefon: 0451-500-2786
Telefax: 0451-500-2999
daniel.franke at imbs.mu-luebeck.de