Re: pam_unix.so + nsswitch.conf + nis

[Tomas Mraz <tmraz redhat com>]

On Wed, 2007-08-22 at 12:40 +0300, Vassilis Vatikiotis wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> > > And the compat option is not for NIS lookups, it works with
> > > every other service, too.
> 
> Right, I didn't know that. Good to know.
> 
> > > What you mean is, that the +::::: notation in passwd/shadow files
> > > was used in libc5 without NYS to support NIS,
> 
> Yes you put much better.... my powers of expressiveness in english are
> lacking Im afraid
> 
> I was using the compat option with the + notation in my /etc files but I
> was under the impression that since the compat option was "outdated", it
> was a good thing to change it. The "files nis" in nsswitch.conf works,
> meaning that lookups, local and NIS, work but still there is this
> problem. Why, after a successful "files" lookup, the control doesn't
> return to the caller function and goes on initiating a conversation with
> the NIS server? Don't know if that conversation is a lookup or something
> else to be honest.
There might be for example lookup for some group which is non-existant
in local /etc/group. Do you have pam_access.so in the pam configs? Or
pam_limits.so? And if yes what are the contents of access.conf and
limits.conf?

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb