From pst@Shockwave.COM  Sun Feb  2 13:36:45 1997
Received: from precipice.shockwave.com (ppp-206-170-5-3.rdcy01.pacbell.net [206.170.5.3])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id NAA16163
          for <FreeBSD-gnats-submit@freebsd.org>; Sun, 2 Feb 1997 13:36:42 -0800 (PST)
Received: (from pst@localhost) by precipice.shockwave.com (8.8.4/8.7.3) id NAA16136; Sun, 2 Feb 1997 13:36:05 -0800 (PST)
Message-Id: <199702022136.NAA16136@precipice.shockwave.com>
Date: Sun, 2 Feb 1997 13:36:05 -0800 (PST)
From: Paul Traina <pst@Shockwave.COM>
Reply-To: pst@Shockwave.COM
To: FreeBSD-gnats-submit@freebsd.org
Subject: login_access.c doesn't work with NIS by default
X-Send-Pr-Version: 3.2

>Number:         2641
>Category:       bin
>Synopsis:       login_access.c doesn't work with NIS by default
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    jhb
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Feb  2 13:40:01 PST 1997
>Closed-Date:    Tue Jan 15 20:26:04 UTC 2008
>Last-Modified:  Tue Jan 15 20:26:04 UTC 2008
>Originator:     Paul Traina
>Release:        FreeBSD 3.0-CURRENT i386
>Organization:
Juniper Networks
>Environment:

3.0 current

>Description:

login-access.c in src/usr.bin/login has code to check the NIS netgroup.
It is disabled by default.

>How-To-Repeat:

Use the @group syntax in a login access file.

>Fix:
	
Since NIS is enabled elsewhere, this should be changed to a run-time
check to see if NIS is available and up, and then check the netgroup.
I'd do this myself, but it needs to be tested under various error
conditions too,  so I thought Bill might be interested in it.
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->analyzed 
State-Changed-By: pst 
State-Changed-When: Fri Feb 14 10:05:02 PST 1997 
State-Changed-Why:  
It's clear what needs to be done, but this does need to be tested. 


Responsible-Changed-From-To: freebsd-bugs->wpaul 
Responsible-Changed-By: pst 
Responsible-Changed-When: Fri Feb 14 10:05:02 PST 1997 
Responsible-Changed-Why:  
NIS = wpaul 

From: John Baldwin <jobaldwi@vt.edu>
To: wpaul@freebsd.org, pst@Shockwave.COM,
	freebsd-gnats-submit@freebsd.org
Cc:  
Subject: Re: bin/2641: login_access.c doesn't work with NIS by default
Date: Mon, 22 Mar 1999 09:45:43 -0500 (EST)

 I've tested the netgroup support for login.access(5) on a machine running
 2.2.7-RELEASE and it seems to be working.  I used the following patch to the
 2.2.7 /usr/src/usr.bin/login/Makefile:
 
 --- Makefile.orig       Mon Mar 22 09:42:35 1999
 +++ Makefile    Mon Mar 22 09:35:02 1999
 @@ -9,7 +9,7 @@
  #Uncomment to activate login_auth
  #Warning: requires src/libexec/login_* auth modules
  #LC_AUTH=-DLOGIN_CAP_AUTH
 -CFLAGS+=-Wall -DSKEY -DLOGIN_ACCESS -DLOGALL -DLOGIN_CAP $(LC_AUTH)
 +CFLAGS+=-Wall -DSKEY -DLOGIN_ACCESS -DLOGALL -DLOGIN_CAP -DNIS $(LC_AUTH)
  
  .if defined(KLOGIN_PARANOID)
  CFLAGS+=-DKLOGIN_PARANOID
 
 ---
 
 John Baldwin <jobaldwi@vt.edu> -- http://members.freedomnet.com/~jbaldwin/
 PGP Key: http://members.freedomnet.com/~jbaldwin/pgpkey.asc
 
 
Responsible-Changed-From-To: wpaul->jhb 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Tue Jul 31 07:26:13 UTC 2007 
Responsible-Changed-Why:  
jhb: this is an antique PR that you initiated.  Should I assume that by 
now it is OBE? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=2641 

From: John Baldwin <jhb@freebsd.org>
To: bug-followup@freebsd.org, pst@shockwave.com
Cc:  
Subject: Re: bin/2641: login_access.c doesn't work with NIS by default
Date: Tue, 31 Jul 2007 13:54:52 -0400

 I didn't actually initiate the bug, just provided a patch.  The login_access 
 stuff has since moved into PAM, and des@ recently committed a fix from the PR 
 bin/112955.  This old one is now a dup of that one.
 
 -- 
 John Baldwin
State-Changed-From-To: analyzed->closed 
State-Changed-By: jhb 
State-Changed-When: Tue Jan 15 20:25:33 UTC 2008 
State-Changed-Why:  
Fix committed to at least HEAD.  See bin/112955 for further details. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=2641 
>Unformatted:
