December 2012 - WLUG - wlug.mailman3.com

Re: [Wlug] Overriding NIS accounts

by John Stoffel

Yup, what you did makes perfect sense. It's probably a bug in RHEL5.3, can you upgrade? I'm going to be busy at work the rest of the week and might not have the time to play with this on my RHEL 5.5/5.6 systems either. Bill> Note that the config I had originally described works on other systems Bill> (versions, distros). It's a little crazy-making. Bill> On Wed, Dec 19, 2012 at 05:17:14PM -0500, John Stoffel wrote: >> Date: Wed, 19 Dec 2012 17:17:14 -0500 >> From: John Stoffel <john(a)stoffel.org> >> To: Worcester Linux Users Group <wlug(a)mail.wlug.org> >> Cc: Worcester Linux Users Group <wlug(a)wlug.org> >> Subject: Re: [Wlug] Overriding NIS accounts >> Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> >> Precedence: list >> >> >>>>> "John" == John Stoffel <john(a)stoffel.org> writes: >> >> >>>>> "Bill" == Bill Mills-Curran <bill(a)mills-curran.net> writes: Bill> I have an issue at my work with the configuration of one of our Bill> several flavors of linux servers. >> Bill> The goal is to override the NIS-specified login directory definition Bill> by using this syntax in /etc/passwd: >> Bill> +userx:::::/home/userx: >> John> Don't do that, just put the user entry in there without the leading +, John> then it will override properly. >> >> But thinking about it more (not tested yet though) you just want to >> override the home directory, but keep his password in NIS. Fun. I'll >> have to play around and see what I can test tmorrow. >> >> John >> _______________________________________________ >> Wlug mailing list >> Wlug(a)mail.wlug.org >> http://mail.wlug.org/mailman/listinfo/wlug >> Bill> _______________________________________________ Bill> Wlug mailing list Bill> Wlug(a)mail.wlug.org Bill> http://mail.wlug.org/mailman/listinfo/wlug

Dec. 20, 2012

Re: [Wlug] Overriding NIS accounts

by Bill Mills-Curran

Note that the config I had originally described works on other systems (versions, distros). It's a little crazy-making. On Wed, Dec 19, 2012 at 05:17:14PM -0500, John Stoffel wrote: > Date: Wed, 19 Dec 2012 17:17:14 -0500 > From: John Stoffel <john(a)stoffel.org> > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Cc: Worcester Linux Users Group <wlug(a)wlug.org> > Subject: Re: [Wlug] Overriding NIS accounts > Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Precedence: list > > >>>>> "John" == John Stoffel <john(a)stoffel.org> writes: > > >>>>> "Bill" == Bill Mills-Curran <bill(a)mills-curran.net> writes: > Bill> I have an issue at my work with the configuration of one of our > Bill> several flavors of linux servers. > > Bill> The goal is to override the NIS-specified login directory definition > Bill> by using this syntax in /etc/passwd: > > Bill> +userx:::::/home/userx: > > John> Don't do that, just put the user entry in there without the leading +, > John> then it will override properly. > > But thinking about it more (not tested yet though) you just want to > override the home directory, but keep his password in NIS. Fun. I'll > have to play around and see what I can test tmorrow. > > John > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Dec. 19, 2012

Re: [Wlug] Overriding NIS accounts

by John Stoffel

>>>>> "John" == John Stoffel <john(a)stoffel.org> writes: >>>>> "Bill" == Bill Mills-Curran <bill(a)mills-curran.net> writes: Bill> I have an issue at my work with the configuration of one of our Bill> several flavors of linux servers. Bill> The goal is to override the NIS-specified login directory definition Bill> by using this syntax in /etc/passwd: Bill> +userx:::::/home/userx: John> Don't do that, just put the user entry in there without the leading +, John> then it will override properly. But thinking about it more (not tested yet though) you just want to override the home directory, but keep his password in NIS. Fun. I'll have to play around and see what I can test tmorrow. John

Dec. 19, 2012

Re: [Wlug] Overriding NIS accounts

by John Stoffel

>>>>> "Bill" == Bill Mills-Curran <bill(a)mills-curran.net> writes: Bill> I have an issue at my work with the configuration of one of our Bill> several flavors of linux servers. Bill> The goal is to override the NIS-specified login directory definition Bill> by using this syntax in /etc/passwd: Bill> +userx:::::/home/userx: Don't do that, just put the user entry in there without the leading +, then it will override properly. John

Dec. 19, 2012

Re: [Wlug] Overriding NIS accounts

by John Stoffel

Bill> No joy. That didn't do it, unless I need to reboot something. Works for me on a RHEL5.5 box. I took one of my users, changed his home directory and put it into /etc/passwd on the local system. sudo su - <user> put me into the new home dir, just like I expected. I have: passwd: files nis in /etc/nsswitch.conf What do you see on your RHEL5.3 box when you do: getent passwd <user> that will tell you also. Also, make sure you bouce the nscd daemon, it might be caching the old entries. John

Dec. 19, 2012

Re: [Wlug] Overriding NIS accounts

by Bill Mills-Curran

No joy. That didn't do it, unless I need to reboot something. On Wed, Dec 19, 2012 at 03:24:00PM -0500, Mills-Curran, Bill wrote: > Date: Wed, 19 Dec 2012 15:24:00 -0500 > From: Bill Mills-Curran <bill(a)mills-curran.net> > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Cc: Worcester Linux Users Group <wlug(a)wlug.org> > Subject: Re: [Wlug] Overriding NIS accounts > Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Precedence: list > > Tim, > > I /thought/ I tried that configuration, too. I'll give it another > shot. I know that some systems need the "compat". > > Bill > > On Wed, Dec 19, 2012 at 03:13:21PM -0500, Tim Keller wrote: > > Date: Wed, 19 Dec 2012 15:13:21 -0500 > > From: Tim Keller <turbofx(a)gmail.com> > > To: Worcester Linux Users Group <wlug(a)mail.wlug.org>, > > Bill Mills-Curran <bill(a)mills-curran.net>, > > Worcester Linux Users Group <wlug(a)wlug.org> > > Subject: Re: [Wlug] Overriding NIS accounts > > Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > > Precedence: list > > > > You need to have your passwd entry as: > > passwd: files nis > > Then it'll look at your local /etc/passwd, then nis. > > Thanks, > > Tim. > > > > On Wed, Dec 19, 2012 at 1:18 PM, Bill Mills-Curran <bill(a)mills-curran.net> > > wrote: > > > > I have an issue at my work with the configuration of one of our > > several flavors of linux servers. > > > > The goal is to override the NIS-specified login directory definition > > by using this syntax in /etc/passwd: > > > > +userx:::::/home/userx: > > +@grpx:::::: > > +:::::: > > > > /etc/nsswitch.conf has (in part): > > > > passwd: * * compat > > shadow: * * files nis > > group: * * *files nis > > > > The distribution is Red Hat Enterprise Linux Server release 5.2 > > (Tikanga). > > > > If this was working I would get the following: > > > > > echo ~userx > > /home/userx > > > > Instead, I'm getting the login dir specified in NIS. > > > > I've successfully configured a Red Hat 6.3 server to work properly, > > but this one is driving me batty. > > > > Any suggestions? > > > > TIA, > > Bill > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > > > -- > > I am leery of the allegiances of any politician who refers to their > > constituents as "consumers". > > > _______________________________________________ > > Wlug mailing list > > Wlug(a)mail.wlug.org > > http://mail.wlug.org/mailman/listinfo/wlug > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Dec. 19, 2012

Re: [Wlug] Overriding NIS accounts

by Bill Mills-Curran

Tim, I /thought/ I tried that configuration, too. I'll give it another shot. I know that some systems need the "compat". Bill On Wed, Dec 19, 2012 at 03:13:21PM -0500, Tim Keller wrote: > Date: Wed, 19 Dec 2012 15:13:21 -0500 > From: Tim Keller <turbofx(a)gmail.com> > To: Worcester Linux Users Group <wlug(a)mail.wlug.org>, > Bill Mills-Curran <bill(a)mills-curran.net>, > Worcester Linux Users Group <wlug(a)wlug.org> > Subject: Re: [Wlug] Overriding NIS accounts > Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Precedence: list > > You need to have your passwd entry as: > passwd: files nis > Then it'll look at your local /etc/passwd, then nis. > Thanks, > Tim. > > On Wed, Dec 19, 2012 at 1:18 PM, Bill Mills-Curran <bill(a)mills-curran.net> > wrote: > > I have an issue at my work with the configuration of one of our > several flavors of linux servers. > > The goal is to override the NIS-specified login directory definition > by using this syntax in /etc/passwd: > > +userx:::::/home/userx: > +@grpx:::::: > +:::::: > > /etc/nsswitch.conf has (in part): > > passwd: * * compat > shadow: * * files nis > group: * * *files nis > > The distribution is Red Hat Enterprise Linux Server release 5.2 > (Tikanga). > > If this was working I would get the following: > > > echo ~userx > /home/userx > > Instead, I'm getting the login dir specified in NIS. > > I've successfully configured a Red Hat 6.3 server to work properly, > but this one is driving me batty. > > Any suggestions? > > TIA, > Bill > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -- > I am leery of the allegiances of any politician who refers to their > constituents as "consumers". > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

Dec. 19, 2012

Re: [Wlug] Overriding NIS accounts

by Tim Keller

You need to have your passwd entry as: passwd: files nis Then it'll look at your local /etc/passwd, then nis. Thanks, Tim. On Wed, Dec 19, 2012 at 1:18 PM, Bill Mills-Curran <bill(a)mills-curran.net>wrote: > I have an issue at my work with the configuration of one of our > several flavors of linux servers. > > The goal is to override the NIS-specified login directory definition > by using this syntax in /etc/passwd: > > +userx:::::/home/userx: > +@grpx:::::: > +:::::: > > /etc/nsswitch.conf has (in part): > > passwd: compat > shadow: files nis > group: files nis > > The distribution is Red Hat Enterprise Linux Server release 5.2 > (Tikanga). > > If this was working I would get the following: > > > echo ~userx > /home/userx > > Instead, I'm getting the login dir specified in NIS. > > I've successfully configured a Red Hat 6.3 server to work properly, > but this one is driving me batty. > > Any suggestions? > > TIA, > Bill > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

Dec. 19, 2012

Overriding NIS accounts

by Bill Mills-Curran

I have an issue at my work with the configuration of one of our several flavors of linux servers. The goal is to override the NIS-specified login directory definition by using this syntax in /etc/passwd: +userx:::::/home/userx: +@grpx:::::: +:::::: /etc/nsswitch.conf has (in part): passwd: compat shadow: files nis group: files nis The distribution is Red Hat Enterprise Linux Server release 5.2 (Tikanga). If this was working I would get the following: > echo ~userx /home/userx Instead, I'm getting the login dir specified in NIS. I've successfully configured a Red Hat 6.3 server to work properly, but this one is driving me batty. Any suggestions? TIA, Bill

Dec. 19, 2012

Re: [Wlug] Possible intrusion?

by Bill Mills-Curran

On Sun, Dec 16, 2012 at 11:54:35PM -0500, Chuck Anderson wrote: > Date: Sun, 16 Dec 2012 23:54:35 -0500 > From: Chuck Anderson <cra(a)WPI.EDU> > To: Worcester Linux Users Group <wlug(a)wlug.org> > Subject: Re: [Wlug] Possible intrusion? > Reply-To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > Precedence: list > > On Sun, Dec 16, 2012 at 12:08:28PM -0500, Bill Mills-Curran wrote: > > I was looking at the output of "last" recently and found several > > entries like this on my home server: > > > > userxx pts/0 c-24-91-141-172. Sun Dec 2 14:57 - 15:09 (00:11) > > > > (userxx represents my username) > > > > I did a reverse lookup on 172.141.92.24: > > Besides the fact that the IP you are looking up doesn't match the > hostname c-24-91-141-172 in forward or reverse order (you are off by > one), you can't be sure of the format of the logged hostname--you are > assuming you need to reverse the components of the hostname to come up > with an IP address of 172.141.91.24, but how do you know it isn't > really 24.91.141.172? How can you be sure there is any relation at > all between the FQDN format and any IP address at all? Also, you are > looking at trumcated hostnames from "last". > > You should always check the actual IP that was logged in wtmp with > last -i, and put the hostname or IP at the end of the output lines so > it doesn't get truncated with last -a: > > last -i -a > > and then do a whois lookup on that IP. > > Reverse DNS can't be trusted since the owner of the IP address can > often set their reverse DNS to absolutely anything they want--it > should never be relied upon solely for audit logging. > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > Thanks for the tip.

Dec. 17, 2012