Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Sun
[Top] [All Lists]

Re: Security Configuration Settings?

Subject: Re: Security Configuration Settings?
Date: Thu, 23 Sep 2004 11:04:19 +0200
On Tuesday, 2004-09-21 at 13:34:33 -0000, El C0chin0 wrote:

I don't understand and haven't been able to find anything related to what 
describes 'compat'.  Can any one provide me with why it is a good measure to 
change this from 'files' to 'compat' and what other changes may be necessary 
or what exactly is the difference?

Please keep your lines to 72~80 chars.

Do a "man nsswitch.conf", search for compat:

     compat                   Valid only for passwd and  group;
                              implements   "+"   and  "-".  See
                              Interaction with +/- syntax.

  Interaction with +/- syntax
     Releases prior to SunOS 5.0 did not have  the  name  service
     switch  but  did  allow  the  user  some  policy control. In
     /etc/passwd  one  could  have  entries  of  the  form  +user
     (include  the  specified user from NIS passwd.byname), -user
     (exclude the specified  user)  and  +  (include  everything,
     except  excluded users, from NIS passwd.byname). The desired
     behavior was often  "everything  in  the  file  followed  by
     everything  in NIS", expressed by a solitary + at the end of
     /etc/passwd. The switch provides  an  alternative  for  this
     case  ("passwd:  files nis") that does not require + entries
     in /etc/passwd and /etc/shadow (the latter is a new addition
     to SunOS 5.0, see shadow(4)).

     If this is not sufficient, the NIS/YP  compatibility  source
     provides  full  +/-  semantics.  It  reads  /etc/passwd  for
     getpwnam(3C)  functions  and  /etc/shadow  for  getspnam(3C)
     functions and, if it finds +/- entries, invokes an appropri-
     ate source. By default, the source is "nis", but this may be
     overridden  by  specifying "nisplus" or "ldap" as the source
     for the pseudo-database passwd_compat.

     Note that for every /etc/passwd entry,  there  should  be  a
     corresponding entry in the /etc/shadow file.

     The NIS/YP  compatibility  source  also  provides  full  +/-
     semantics   for   group;  the  relevant  pseudo-database  is
     group_compat.

HTH,
Lupe Christoph

-- 
| lupe@lupe-christoph.de       |           http://www.lupe-christoph.de/ |
| "... putting a mail server on the Internet without filtering is like   |
| covering yourself with barbecue sauce and breaking into the Charity    |
| Home for Badgers with Rabies.                            Michael Lucas |

<Prev in Thread] Current Thread [Next in Thread>