NIS + SSH problem

[Rick Stevens]

Roberto F. Brandao wrote:
> Hello,
> 
>   I am getting a serious problem with NIS and SSH in a pack of Red Hat 8
> servers. When a common user (not root) tries to open a ssh connection to
> another server, I get the message "Connection to node2 closed by remote
> host". 
> /var/log/messages in NIS server shows:
> ypserv[4683]:refused connect from 192.168.0.21:32776 to procedure
> ypproc_all
> 
> /var/log/secure in client shows:
> sshd[2793]: Accepted password for test from 192.168.0.11 port 32797 ssh2
> sshd[2795]: fatal: login_get_lastlog: cannot find account for uid xxx
> 
> When using either ftp or telnet, it works fine. It also works fine for
> root. I checked permissions for /etc/passwd: it is 644. There are no
> blank lines neither in /etc/passwd nor /etc/shadow. /etc/hosts,
> /etc/hosts.allow and /etc/hosts.deny looks fine. 
> 
> Can someone help me, please ?

Check your /etc/ssh/sshd_config file and verify that you have "UseLogin
yes" set.  If you don't, then the login program is never invoked by sshd
when a user logs in and consequently, their home environment isn't set
up (the automounter won't mount their home directory).

If you enable this, note that "X11Forwarding" will be disabled (login
doesn't know how to handle the xauth cookies).  Take a careful read of
"man sshd_config" for further details.
----------------------------------------------------------------------
- Rick Stevens, Senior Systems Engineer     rstevens at vitalstream.com -
- VitalStream, Inc.                       http://www.vitalstream.com -
-                                                                    -
-      "Microsoft is a cross between The Borg and the Ferengi.       -
-  Unfortunately they use Borg to do their marketing and Ferengi to  -
-               do their programming."  -- Simon Slavin              -
----------------------------------------------------------------------