Forgot your password?
New user?
The Ticket-Granting Ticket
Document Actions
Shadow Passwords with NIS
Shadow Passwords with NIS
Next: PAM Up: The nsswitch.conf File Previous: The nsswitch.conf File
Shadow Passwords with NIS
Shadow passwords over NIS are always a bad idea. You loose the security, which shadow gives you, and it is supported by only some few Linux C Libraries. A good way to avoid shadow passwords over NIS is, to put only the local system users in /etc/shadow. Remove the NIS user entries from the shadow database, and put the password back in passwd. So you can use shadow for the root login, and normal passwd for NIS user. This has the advantage that it will work with every NIS client.
Linux
The only Linux libc which supports shadow passwords over NIS, is the GNU C Library 2.x. Linux libc5 has no support for it. Linux libc5 compiled with NYS enabled has some code for it. But this code is badly broken in some cases and doesn't work with all correct shadow entries.
2005-05-04