RE: Help diagnosing NIS breakage ?

> ----- Robin P. Blanchard's Original Message -----
> > 
> > Still pulling my hair out on this one...Updated to latest 
> kern/world 
> > this morning and NIS users are no longer working.
> 
> What -`date` version were you running where things worked 
> before you did the 1st upgrade?
> 
> Can you provide the contents of your /etc/group, /etc/passwd 
> (just the last two lines of each), and /etc/nsswitch.conf files?
> 
> Your demonstration below indicates that NIS is correctly 
> setup and running, but that it is not correctly configured in 
> for system usage.
> 
> While I realize it doesn't help you, I am running the latest 
> NIS code in a cluster and it works fine (FreeBSD 4.8 server, 
> various clients).

OK... Nsswitch.conf exists on neither machine here. I setup a test
nsswitch.conf on the broken NIS box to use NIS but it didn't help at all.

1)
On FreeBSD 5.1-CURRENT #0: Tue Jun 17 10:28:52 EDT 2003:
# ypcat passwd |fgrep robin
robin:OeIS3xdIRAiQs:20292:30028::/home/robin:/bin/bash
# finger robin
Login: robin                            Name: 
Directory: /home/robin                  Shell: /bin/bash
Never logged in.
No Mail.
No Plan.
# id robin
uid=20292(robin) gid=30028(NSS) groups=30028(NSS), 30000(gactr), 30026(ITS)
# tail -2 /etc/passwd 
nobody:*:65534:65534:Unprivileged user:/nonexistent:/sbin/nologin
+:*:::::
# tail -2 /etc/passwd 
nobody:*:65534:65534:Unprivileged user:/nonexistent:/sbin/nologin
+:*:::::
# tail -2 /etc/group 
nobody:*:65534:
+:*:0:


2)
On FreeBSD 5.1-CURRENT #0: Mon Jul  7 11:33:56 EDT 2003
# ypcat passwd |fgrep robin
robin:OeIS3xdIRAiQs:20292:30028::/home/robin:/bin/bash
# finger robin
Login: robin                            Name: 
Directory: /home/robin                  Shell: /bin/bash
Last login Mon Jul  7 07:47 (EDT) on ttyp0 from 10.2.2.10
No Mail.
No Plan.
# id robin
id: robin: no such user
# tail -2 /etc/passwd 
nobody:*:65534:65534:Unprivileged user:/nonexistent:/sbin/nologin
+:*:::::
#
# tail -2 /etc/group 
nobody:*:65534:
+:*:0:

And here's something else interesting on this 'broken' NIS box:

# ls -ald .
drwx--x--x  4 20292  NSS  4.0K Jun 13 13:34 ./

So (via NIS) GID translation is working but not UID translation....

Look forward to getting this solved...


> 
> -john
> 
> > Demonstration:
> > 
> > # ypcat passwd |fgrep robin 
> > robin:OeIS3xdIRAiQs:20292:30028::/home/robin:/bin/bash
> > # ypcat group |fgrep robin 
> > 
> gactr::30000:holmesr,wrighta,prestonh,reagind,gankol,cafieroj,cahoonb,
> > pettigr
> > m,brantlek,thumat,dosterc,nate,robin,charles
> > ITS::30026:dosterc,nate,robin,charles
> > NSS::30028:dosterc,nate,robin,charles,test
> > # ps ax |fgrep ypbind
> > 79910  ??  Ss     0:00.03 ypbind
> > # ypwhich 
> > GCDC2.gc.nat
> > # finger robin
> > Login: robin                            Name: 
> > Directory: /home/robin                  Shell: /bin/bash
> > Last login Mon Jul  7 07:47 (EDT) on ttyp0 from 10.2.2.10
> > No Mail.
> > No Plan.
> > 
> > So NIS is 'working'...But:
> > # id robin
> > id: robin: no such user
> > 
> > And as a result, he (I) cannot login.
> > 
> > # su - robin ; tail -1 /var/log/auth.log
> > 
> > su: Sorry
> > Jul  7 13:59:29 ftp su: pam_acct_mgmt: error in service module
> > 
> > There's a truss and a ktrace (of the id command) available at: 
> > ftp://ftp.gactr.uga.edu/incoming/id.tar.gz
> > 
> > Thanks in advance.
>