Subject: /etc/security and NIS
To: None <netbsd-help@netbsd.org>
From: None <mcmahill@mtl.mit.edu>
List: netbsd-help
Date: 05/13/1999 15:18:01
I use NIS on a NetBSD-1.4_BETA machine.  The NIS server is a solaris box.
The NetBSD daily security check is unhappy about some of the NIS stuff and
I was wondering if its an operator error, or a real, should be send-pr'ed
error.

On my netbsd machine, 
in /etc/passwd

+@my-users:*:0:0:::

and in /etc/master.passwd

+@my-users:::::::::



but the daily insecurity output shows

Checking the /etc/master.passwd file:
Login toor is off but still has a valid shell (/bin/sh)
Login operator is off but still has a valid shell (/bin/csh)
Login +@my-users has non-alphanumeric characters.
Login +@my-users has more than 8 characters.
Login +@my-users has no password.
Login +@my-users does not have a valid shell ()
Login +@my-users has a negative user id.
Login +@my-users has a negative group id.

and

Checking the /etc/group file:
Line 18 has the wrong number of fields.


The line 18 which it doesn't like has

+:

to get groups from NIS.


Comments?

Thanks

-Dan