From owner-freebsd-isp  Sat Oct 14  8:53:14 2000
Delivered-To: freebsd-isp@freebsd.org
Received: from mail.camelot.de (mailout.camelot.de [195.30.224.18])
	by hub.freebsd.org (Postfix) with ESMTP
	id D76A937B502; Sat, 14 Oct 2000 08:53:08 -0700 (PDT)
Received: from robin.camelot.de (bofax@robin.camelot.de [195.30.224.3])
	by mail.camelot.de (8.11.1/8.11.1) with ESMTP id e9EFr6s26516
	(using TLSv1/SSLv3 with cipher EDH-RSA-DES-CBC3-SHA (168 bits) verified OK);
	Sat, 14 Oct 2000 17:53:07 +0200 (CEST)
Received: (from bofax@localhost)
	by robin.camelot.de (8.11.1/8.11.1) id e9EFr6e26513;
	Sat, 14 Oct 2000 17:53:06 +0200 (CEST)
Date: Sat, 14 Oct 2000 14:52:23 +0200
From: Florian Bofinger <bofax@camelot.de>
To: freebsd-questions@camelot.de, freebsd-isp@camelot.de
Subject: Re: NIS/YP getpwnam timeout in 3.5-RELEASE?
Message-ID: <20001014145223.B20898@camelot.de>
Mail-Followup-To: Florian Bofinger <bofax@camelot.de>,
	freebsd-questions@camelot.de, freebsd-isp@camelot.de
References: <20001013125947.C15981@camelot.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20001013125947.C15981@camelot.de>; from bofax@camelot.de on Fri, Oct 13, 2000 at 12:59:47PM +0200
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hi,

On Fri, Oct 13, 2000 at 12:59:47PM +0200, Florian Bofinger wrote:
> Hi,
> 
> since a few days, our NIS shows strange behaviour.
> 
> When calling getpwnam on a NIS client for a  valid, existing, plussed loginname
> (+user:::::::::), getpwnam->pw_passwd sometimes returns the crypted password
> (which is the right behaviour) but sometimes returns '*'. Is it possible, that
> the ypmatch-call in getpwent.c does a timeout?
> 
> Does
> 
> 	if (_yp_enabled == -1)
> 		_ypinitdb();
> 	if (_yp_enabled)
> 		rval = _getyppass(&_pw_passwd, name, "passwd.byname"); 
> 
> show, that if _ypinitdb() does not work, YP is not used at all?
> 
> How can it be, that getpwnam->pw_passwd returns "*" instead of
> getpwnam beeing NULL?
> 
> Anyone any suggestions?

I should have taken a look into /var/log/messages on the YP server, where
it says a few times:

Oct 12 16:40:27 hostname ypserv[189]: access to master.passwd.byname denied -- client X.X.X.X:2305 not privileged

Why does ypbind use TCP ports > 1023? It is possible, that there are no
ports < 1024 free, but ypbind never should use ports above > 1023 or am
I wrong?

Greetings,
		Florian

-- 
Florian Bofinger <bofax@camelot.de> - CameloT e.K.
www.camelot.de - Der "sagenhafte" Internet Full-Service Provider 
'Can't buy what I want because it's free' - Pearl Jam (FreeBSD rocks)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message