From: "Wiest, Damian" <dmwiest@rc2corp.com>
To: "'Gregory Hicks'" <ghicks>
Cc: "'focus-sun@securityfocus.com'" <focus-sun@securityfocus.com>
Subject: RE: Security Configuration Settings?
Date: Fri, 24 Sep 2004 13:36:55 -0500
[...snip...]
This tells the system to get ALL user info from LDAP/NIS. After you
add the line, be sure to run pwconv to sync /etc/passwd and
/etc/shadow.
If you use /usr/ucb/vipw to edit /etc/passwd you won't need to run
/bin/pwconv.
Well, ... This is true. But vipw requires that you also edit the
shadow file and add the new entry (or delete the old entry) there.
Since the man page on "shadow" states that
In order to make system administration manageable,
/etc/shadow entries should appear in exactly the same order
as /etc/passwd entries; this includes ``+'' and ``-''
entries if the compat source is being used (see
nsswitch.conf(4)).
I'd prefer to let the system do the arranging instead of having to
worry about it myself. "pwconv" does this arranging for me.
Regards,
Gregory hicks
-Damian
-------------------------------------------------------------------
Gregory Hicks | Principal Systems Engineer
Cadence Design Systems | Direct: 408.576.3609
555 River Oaks Pkwy M/S 6B1 | Fax: 408.894.3400
San Jose, CA 95134 | Internet: ghicks@cadence.com
I am perfectly capable of learning from my mistakes. I will surely
learn a great deal today.
"A democracy is a sheep and two wolves deciding on what to have for
lunch. Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin
"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton
