Subject: /etc/security and NIS
To: None <netbsd-help@netbsd.org>
From: None <mcmahill@mtl.mit.edu>
List: netbsd-help
Date: 05/13/1999 15:18:01
I use NIS on a NetBSD-1.4_BETA machine. The NIS server is a solaris box.
The NetBSD daily security check is unhappy about some of the NIS stuff and
I was wondering if its an operator error, or a real, should be send-pr'ed
error.
On my netbsd machine,
in /etc/passwd
+@my-users:*:0:0:::
and in /etc/master.passwd
+@my-users:::::::::
but the daily insecurity output shows
Checking the /etc/master.passwd file:
Login toor is off but still has a valid shell (/bin/sh)
Login operator is off but still has a valid shell (/bin/csh)
Login +@my-users has non-alphanumeric characters.
Login +@my-users has more than 8 characters.
Login +@my-users has no password.
Login +@my-users does not have a valid shell ()
Login +@my-users has a negative user id.
Login +@my-users has a negative group id.
and
Checking the /etc/group file:
Line 18 has the wrong number of fields.
The line 18 which it doesn't like has
+:
to get groups from NIS.
Comments?
Thanks
-Dan