Subject: NIS/YP and master.passwd
To: None <netbsd-users@netbsd.org>
From: Devin Ganger <devin@premier1.net>
List: netbsd-users
Date: 12/09/1998 14:09:37
System info:
NetBSD blacktower 1.3.2 NetBSD 1.3.2 (BLACKTOWER) #1: Mon Dec  7 14:10:13
PST 1998
staff@blacktower:/usr/src/sys/arch/i386/compile/BLACKTOWER i386

What is the correct syntax for adding + and - (NIS/YP) entries into
master.passwd so that they actually are correctly generated in passwd?  Or
do I need to worry about it?

I have the following three entries added at the end of master.passwd:

  +@dnsadmin:::::::::
  +red:::::::::
  +:*::::::::/sbin/nologin

and here is what they look like in /etc/passwd:

  +@dnsadmin:*:0:0:::
  +red:*:0:0:::
  +:*:0:0:::/sbin/nologin

This is bad, since this is in effect saying that red or anyone in the
dnsadmin netgroup who logs in will have their UID/GID overridden and be
root.  (The third line, which changes everyone to a shell of /sbin/nologin,
was necessary on Solaris in order to get NIS to properly show usernames even
for those people who couldn't login to the box.)

Does this matter, or is it a bug?  Does NIS work differently on NetBSD, and
is there any documentation on it other than the fairly sketchy manpages?

--
Devin L. Ganger
Chief Systems Administrator, Premier1 Internet Services, Inc., Sultan, WA
"....yet he is not two, but one Chirst; one, not by conversion of
the Godhead into flesh, but by taking of the Manhood into God...."
The Creed of Saint Athanasius, on the nature of Jesus Christ