From danm@prime.gushi.org  Wed Dec 10 02:38:30 2008
Return-Path: <danm@prime.gushi.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id CEF9A1065670
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 10 Dec 2008 02:38:30 +0000 (UTC)
	(envelope-from danm@prime.gushi.org)
Received: from prime.gushi.org (prime.gushi.org [72.9.101.130])
	by mx1.freebsd.org (Postfix) with ESMTP id 6DC138FC16
	for <FreeBSD-gnats-submit@freebsd.org>; Wed, 10 Dec 2008 02:38:30 +0000 (UTC)
	(envelope-from danm@prime.gushi.org)
Received: from prime.gushi.org (localhost [127.0.0.1])
	by prime.gushi.org (8.14.1/8.14.1) with ESMTP id mBA2IDpL044936
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 9 Dec 2008 21:18:15 -0500 (EST)
	(envelope-from danm@prime.gushi.org)
Received: (from danm@localhost)
	by prime.gushi.org (8.14.1/8.14.1/Submit) id mBA2IDt9044935;
	Tue, 9 Dec 2008 21:18:13 -0500 (EST)
	(envelope-from danm)
Message-Id: <200812100218.mBA2IDt9044935@prime.gushi.org>
Date: Tue, 9 Dec 2008 21:18:13 -0500 (EST)
From: Dan Mahoney <danm@prime.gushi.org>
Reply-To: Dan Mahoney <danm@prime.gushi.org>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Passwd cannot be forced to "yp" mode in some circumstances.
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         129541
>Category:       bin
>Synopsis:       [nis] passwd(1) cannot be forced to "yp" mode in some circumstances.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Dec 10 02:40:01 UTC 2008
>Closed-Date:    
>Last-Modified:  Mon Dec 29 17:21:50 UTC 2008
>Originator:     Dan Mahoney
>Release:        FreeBSD 6.4-STABLE i386
>Organization:
Gushi Systems
>Environment:
System: FreeBSD prime.gushi.org 6.4-STABLE FreeBSD 6.4-STABLE #0: Thu Dec 4 13:23:40 EST 2008 danm@prime.gushi.org:/usr/obj/usr/src/sys/PRIME6 i386

>Description:

"passwd" cannot be forced to NIS unless the machine is configured to use NIS for its own password file.

prime# passwd -y -d gushi-systems -h prime.gushi.org sdk
Changing local password for sdk
New Password:

(n

>How-To-Repeat:

Configure a server as an NIS master server, populate the maps, but do not
add the +:::::::: to /etc/passwd :

prime# ypcat master.passwd.byname|grep sdk
sdk:$1$1WZHl5y0$EjTF/5oH/4tiPJ2.ofGPn1:1084:1084::0:0:Xial Lunashine,,,8138326399:/home/sdk:/usr/local/bin/bash

>Fix:

None known.  This is an edge case, but it's feasibly possible that a server
could want to serve NIS without itself participating in it (via map files 
separate from its own).  Since ypcat and the like all still work, passwd
should (at least when forced) pick up similar hueristics.



>Release-Note:
>Audit-Trail:
>Unformatted:
