RE: NIS/Apache/Password Synchronization Issue

["Dozier, Jr., Ken" <kdozier barton edu>]

Sorry for taking so long to reply.  The ypmatch and ypcat functions
return the same result via shell and PHP functions, which is the hash
for my old password.  So it appears that for some reason the NIS info
isn't being updated from Win2K NIS master.  Although I fully anticipate
blaming the problem on Windows, is it possible there is something on the
Linux side (bad configuration or something) that's causing the problem?
Should I dump NIS altogether and investigate OpenLDAP or some other auth
solution?

Thanks.

Ken.

-----Original Message-----
From: Joe Orton [mailto:jorton redhat com]
Sent: Friday, April 22, 2005 12:01 PM
To: Dozier, Jr., Ken
Cc: taroon-list redhat com
Subject: Re: NIS/Apache/Password Synchronization Issue

On Tue, Apr 19, 2005 at 12:25:35PM -0400, Dozier, Jr., Ken wrote:
> I have written a LAMP(PHP)-based web app for my employer, but I am 
> having authentication problems that I think may be NIS and/or Apache 
> related.  Everyone with a valid account on our network should be able 
> to auth with no problem; however, not everyone is able to do so.  I 
> was able to login with my old password; but after I changed it, the 
> app won't authenticate me with the new one.  The weird thing is that 
> it will log me in if I use my previous password.  Also, the web server

> is RHEL 3 and has no problem logging me in at the console with my new
password.

Have you checked whether the yp_match() function is actually returning
the old password?  Do you have nscd running (it does sound like a
caching issue)?  Does running "ypcat -k passwd.byname" give the same
results on the server as the PHP script?

Regards,

joe