Re: ypserv and sshd not getting along in -current

From: Glenn Johnson <gjohnson_at_srrc.ars.usda.gov>
Date: Sun, 30 Mar 2003 19:59:51 -0600
On Mon, Mar 31, 2003 at 10:46:07AM +1000, Rob B wrote:

> At 02:55 PM 29/03/03, Terry Lambert sent this up the stick:
>
> >Glenn Johnson wrote:
> >
> >> I can not login to a box with FreeBSD 5 -current via ssh because I
> >> get the following error from ypserv:
> >>
> >> Mar 28 12:48:15 node1 ypserv[317]: access to master.passwd.byuid denied 
> >-- client 192.168.1.1:49344 not privileged
> >
> >man ypbind
> >
> >(-s is the magic incantation).
>
> I have the same issue, I tried Terry's suggestion but I don't think
> its working like it should:
> 
> On the client:
> aylee # ps fax|grep yp
>    252  ??  Is     0:0.62 /usr/sbin/ypbind -s
> 
> aylee # rpcinfo -p localhost|grep yp
>         100007   2   udp  1022    ypbind
>         100007   2   tcp   1023    ypbind
> 
> Tailing the server's log:
> Mar 31 10:10:39 erwin ypserv[92]: access to master.passwd.byuid denied -- 
> client 192.168.100.30:49255 not privileged
> 
> Why would the request be coming from a high port when I have
> specifically told it to bind to a low port?

The answer (work around) is to turn off PrivelegeSeparation in your
sshd_config file.

-- 
Glenn Johnson
glennpj_at_charter.net
Received on Sun Mar 30 2003 - 15:59:58 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:02 UTC