From owner-freebsd-questions@FreeBSD.ORG  Thu Oct 16 09:15:32 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A53A216A4B3
	for <freebsd-questions@freebsd.org>;
	Thu, 16 Oct 2003 09:15:32 -0700 (PDT)
Received: from unix18.sihope.com (unix18.sihope.com [207.195.195.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B052843FDD
	for <freebsd-questions@freebsd.org>;
	Thu, 16 Oct 2003 09:15:31 -0700 (PDT)
	(envelope-from adamm@sihope.com)
Received: from unixws1 (unixws1.sihope.com [207.195.195.190])
	by unix18.sihope.com (8.12.9p2/8.12.9) with ESMTP id h9GGFU7P044903
	for <freebsd-questions@freebsd.org>;
	Thu, 16 Oct 2003 11:15:30 -0500 (CDT)
	(envelope-from adamm@sihope.com)
From: Adam Maloney <adamm@sihope.com>
To: freebsd-questions@freebsd.org
Content-Type: text/plain
Message-Id: <1066320928.7414.54.camel@unixws1>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.5 
Date: Thu, 16 Oct 2003 11:15:30 -0500
Content-Transfer-Encoding: 7bit
Subject: NIS problem
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 16 Oct 2003 16:15:32 -0000

(Posted to freebsd-isp on Tuesday, but got no responses)

Feel my pain :)

We have just begun a migration to NIS (please keep the "NIS sucks",
"Sendmail sucks", "FreeBSD sucks", "You suck", "I suck", etc posts to a
dull roar.)

In the last couple of days we have seen a lot of messages like the one
below appearing in /var/log/messages:

Oct 13 06:14:58 xxxxx ypserv[45883]: access to master.passwd.byname
denied -- client 1.2.3.4:3458 not privileged

This goes on for a number of minutes, and then fixes itself.

Obviously, the problem is that the NIS lookup request is coming from a
non-priveleged (> 1024) port, and ypserv won't honor it.  What's not so
obvious is why/how this is happening.

I'm suspecting it's Sendmail, since the frequency of the message
somewhat coincides with the rate of incoming mail on this box.  But I
can't seem to find any clues on the web or usenet confirming this.  Has
anyone seen this before, or know of a solution?