groups wrong on NIS clients

[Glenn Johnson]

On Wed, Apr 23, 2003 at 09:08:29PM -0500, Jacques A. Vidrine wrote:

> On Wed, Apr 23, 2003 at 05:19:15PM -0500, Glenn Johnson wrote:
>
> > > How are you logging in?
> >
> > I was using ssh.  After reading your message, I went down the hall
> > and logged in via the console.  The groups are set correctly when
> > logging in via the console.
>
> > > Whatever login process you are using is responsible for setting
> > > your group list correctly.  It has not done so.
> >
> > As a note, the groups were set correctly via ssh before I updated to
> > the latest sources today.  My previous -current was from April 15,
> > 2003.
>
> Do you have UsePrivilegeSeperation turned on?  (Not that this should
> make a difference ... `works here'.)

I tried with it on and off, same result.

> Do you have anything different from the default configuration?

I am HostbasedAuthentication.  That has never been a problem before.  
Anyway, I tried without it and get the same result.

> The only thing I can think of that might give you different results
> when logging in via the console versus via sshd is if the latter
> cannot contact the NIS server for some reason.  Do you see (e.g. with
> tcpdump) any NIS queries when you attempt to login via ssh?

Yes, I get messages like the following:

10:28:15.092664 node1.cluster.srrc.usda.gov.nfs > node11.cluster.srrc.usda.gov.207013284: reply ok 116 lookup ERROR: No such file or directory

> If you want to dig deeper, you should arrange for sshd to spit out the
> group list.

I will gice that a try.

-- 
Glenn Johnson
USDA, ARS, SRRC			 Phone: (504) 286-4252
New Orleans, LA 70124		e-mail: gjohnson at srrc.ars.usda.gov