--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
This was my original question;
I would like to add (belatedly) that I am running Solaris 2.5.1 and
Adminsuite 2.2.
> I have an NIS+ network with a master server and a replica. There haven't
> been any changes since the last time I added an account, but now,
> suddenly, Solstice errors out, saying that my domain (nas.eckerd.edu) is
> not a valid domain.
>
> >The operation failed with this status:
> >"nas.eckerd.edu" is not a valid NIS+ domain.
>
> However, I can still access all the tables, etc. etc. In playing with
> the problem, I added a . to the end of the domain ("nas.eckerd.edu."),
> which allowed me into the tables. I could modify credentials, but not
> add any new entries. If I did it reported that the domain principal was
> in a different domain from the server.
>
The answer was:
Patch 103612-23 changes the behavior of nis_cachemgr. Backing out of
this patch fixes the problem. There is an adminsuite patch which is
supposedly available now (103502-07 for AdminSuite 2.2 and 104468-06 for
2.3 according to Vencent Ackermann) which will re-sync Solstice with the
nis_cachemgr.
For my part I hit n insteda of y while patchign from cd (by accident!),
so I loaded my old /var/nis/data, /usr/sbin/nas_cachemgr, and
/usr/sbin/rpc.nisd from tape. Life went back to normal.. but only after
replacing the data dir.
A big ALL-CAPS THANK YOU to everyone.. especially to
scott-allendorf@uiowa.edu (Scott Allendorf) who answered me more or less
the moment I wrote the message with the numbers for the patches.
I've appended everyone's messages, thank you to all of you!
+-------------------------------------------------------------------
Walter R. Moore - System Administrator
moorewr@eckerd.edu
http://www.gate.net/~walter
--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg)
Content-type: MESSAGE/RFC822
Return-path: <jfb@pti-us.com>
Received: from triton.eckerd.edu by acasun.eckerd.edu (SMI-8.6/SMI-SVR4)
id LAA06009; Wed, 18 Jun 1997 11:32:59 -0400
Received: from pti-us.com (transformer.pti-us.com)
by triton.eckerd.edu (5.0/SMI-SVR4) id AA01672; Wed, 18 Jun 1997 11:16:14 -0400
Received: from calvin.pti-us.com by pti-us.com (SMI-8.6/SMI-SVR4)
id LAA07106; Wed, 18 Jun 1997 11:29:27 -0400
Received: from ratbert.pti-us.com (ratbert.pti-us.com [199.29.12.65])
by calvin.pti-us.com (8.7.6/8.6.12) with SMTP id LAA20666 for
<moorewr@acasun.eckerd.edu>; Wed, 18 Jun 1997 11:29:26 -0400 (EDT)
Received: by ratbert.pti-us.com (SMI-8.6/SMI-SVR4) id LAA04696; Wed,
18 Jun 1997 11:30:29 -0400
Date: Wed, 18 Jun 1997 11:30:29 -0400
From: jfb@pti-us.com (John Berkery)
Subject: NIS+ master server forgot
To: moorewr@acasun.eckerd.edu
Message-id: <199706181530.LAA04696@ratbert.pti-us.com>
MIME-version: 1.0
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7bit
Content-MD5: iQfhVrC+m1oHiDNKf+R1NA==
> Solstice errors out, saying that my domain (nas.eckerd.edu) is
> not a valid domain.
Been there, done that. The problem is with some patch, can't remember which
one since it was another sysadmin here who fixed it.
Meanwhile put an extra dot after nas.eckerd.edu and solstice will let you in.
Then deinstall the last NIS+ patch you put in.
Jack Berkery, Power Technologies Inc, Schenectady, NY
--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg)
Content-type: MESSAGE/RFC822
Return-path: <sca@sysadm.physics.uiowa.edu>
Received: from triton.eckerd.edu by acasun.eckerd.edu (SMI-8.6/SMI-SVR4)
id LAA06223; Wed, 18 Jun 1997 11:41:55 -0400
Received: from sysadm.physics.uiowa.edu (ra.physics.uiowa.edu)
by triton.eckerd.edu (5.0/SMI-SVR4) id AA01726; Wed, 18 Jun 1997 11:25:07 -0400
Received: by sysadm.physics.uiowa.edu (SMI-8.6/SMI-SVR4) id KAA12214; Wed,
18 Jun 1997 10:38:37 -0500
Date: Wed, 18 Jun 1997 10:38:37 -0500
From: scott-allendorf@uiowa.edu (Scott Allendorf)
Subject: Re: NIS+ master server forgot that it is the root server!
To: moorewr@acasun.eckerd.edu
Message-id: <199706181538.KAA12214@sysadm.physics.uiowa.edu>
MIME-version: 1.0
Content-type: TEXT/PLAIN; CHARSET=US-ASCII
X-Sun-Charset: US-ASCII
This sounds all too familiar. I am going to assume that you are running
Solaris 2.5.1. This same thing happened to me recently, and I found if
I backed out patch 103612-23 (and 103696-02 if it is installed), and then
rebooted, solstice returned to normal.
I hope this helps.
Cheers,
Scott
-- Scott C. Allendorf Email: scott-allendorf@uiowa.edu UNIX Systems Administrator Office: 216A Van Allen Hall Department of Physics and Astronomy Voice: (319) 335-0003 The University of Iowa FAX: (319) 335-1753 Iowa City, Iowa 52242-1479 ICBM: 41 39 43.6 N 91 31 55.1 W--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg) Content-type: MESSAGE/RFC822
Return-path: <jim@birdie.lp.sticomet.com> Return-receipt-to: Jim_Englund@birdie.lp.sticomet.com Received: from triton.eckerd.edu by acasun.eckerd.edu (SMI-8.6/SMI-SVR4) id NAA10067; Wed, 18 Jun 1997 13:32:04 -0400 Received: from lp.sticomet.com by triton.eckerd.edu (5.0/SMI-SVR4) id AA02775; Wed, 18 Jun 1997 13:15:19 -0400 Received: by lp.sticomet.com (SMI-8.6/SMI-SVR4) id NAA09771; Wed, 18 Jun 1997 13:28:42 -0400 Date: Wed, 18 Jun 1997 13:28:42 -0400 From: Jim Englund <Jim_Englund@birdie.lp.sticomet.com> Subject: Re: NIS+ master server forgot that it is the root server! In-reply-to: <Pine.GSO.3.96.970618093741.2063A-100000@acasun> To: "Walter R. Moore" <moorewr@acasun.eckerd.edu> Reply-to: Jim_Englund@birdie.lp.sticomet.com Message-id: <199706181728.NAA09771@lp.sticomet.com> MIME-version: 1.0 (generated by tm-edit 7.105) Content-type: text/plain; charset=US-ASCII Newsgroups: "Walter,R.,Moore",<moorewr@acasun.eckerd.edu> References: <Pine.GSO.3.96.970618093741.2063A-100000@acasun>
On Wed, 18 June 1997 Walter R. Moore wrote: >|I have an NIS+ network with a master server and a replica. There haven't >|been any changes since the last time I added an account, but now, >|suddenly, Solstice errors out, saying that my domain (nas.eckerd.edu) is >|not a valid domain. ... >| >|However, I can still access all the tables, etc. etc. In playing with >|the problem, I added a . to the end of the domain ("nas.eckerd.edu."), >|which allowed me into the tables. I could modify credentials, but not >|add any new entries. If I did it reported that the domain principal was >|in a different domain from the server. >| >|So what's going on? What do I do to fix the problem? >|
Have you recently installed the Solaris 2.5 Patch Cluster? I had similar problems to yours (requiring the trailing . in the domain; but I could add new entries and not modify existing ones!) about a week after we installed the Patch Cluster downloaded from the Sunsolve web site.
A call to Sun support helped us determine that patch 103187-25 is bad for users of Solstice. I backed out the offending patch and restored my /var/nis/data directory from a backup that preceeded the patch cluster installation. The problem went away.
I don't know if restoring the data directory was really necessary. I just didn't have time to go through several fixes and had very little to lose by restoring the older data files.
Hope this helps...
-- ________________________________________________________________________ Jim Englund Jim_Englund@lp.STIcomet.com Software Technology, Inc. La Plata, MD 301-934-5704 Fax: 301-934-5706 ________________________________________________________________________--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg) Content-type: MESSAGE/RFC822
Return-path: <vincent.ackermann@mzmz.ch> Read-receipt-to: vinack@sirius Received: from triton.eckerd.edu by acasun.eckerd.edu (SMI-8.6/SMI-SVR4) id AAA24960; Thu, 19 Jun 1997 00:36:10 -0400 Received: from mail.eunet.ch by triton.eckerd.edu (5.0/SMI-SVR4) id AA07098; Thu, 19 Jun 1997 00:19:27 -0400 Received: from mzmz.ch by mail.eunet.ch (8.8.5/1.34) id EAA25033; Thu, 19 Jun 1997 04:34:56 GMT Received: from acv-ws.mzmz.ch by mzmz.ch (SMI-8.6/SMI-SVR4) id GAA00335; Thu, 19 Jun 1997 06:35:00 +0200 Received: by acv-ws.mzmz.ch (SMI-8.6/SMI-SVR4) id GAA11606; Thu, 19 Jun 1997 06:34:59 +0200 Date: Thu, 19 Jun 1997 06:34:59 +0200 From: vincent.ackermann@mzmz.ch (Vincent Ackermann) Subject: Re: NIS+ master server forgot that it is the root server! To: moorewr@acasun.eckerd.edu Message-id: <199706190434.GAA11606@acv-ws.mzmz.ch> MIME-version: 1.0 Content-type: TEXT/PLAIN; CHARSET=US-ASCII X-Sun-Charset: US-ASCII
Hello Walter Did you applied the last nis patches and did you run solaris 2.5.1 ?
If so, the NIS API has changed and some utilities like AdminSuite need also a patch (103502-07 for AdminSuite 2.2 and 104468-06 for 2.3).
Regards
MICROSWISS-Zentrum Mittelland-Zentralschweiz
Vincent Ackermann Wissenschaftlicher Mitarbeiter / Systemmanager
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Vincent Ackermann Email: vinack@mzmz.ch MICROSWISS-Zentrum X.400: S=vinack O=mzmz P=EUnet A=ARCOM C=CH Mittelland-Zentralschweiz Sportstrasse 1 Phone: +41 32 654 24 33 CH-2540 Grenchen - Switzerland Fax: +41 32 654 24 45 %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg) Content-type: MESSAGE/RFC822
Return-path: <gibian@stars1.hanscom.af.mil> Received: from triton.eckerd.edu by acasun.eckerd.edu (SMI-8.6/SMI-SVR4) id JAA01079; Thu, 19 Jun 1997 09:08:59 -0400 Received: from smtpgw.hanscom.af.mil ([129.53.1.252]) by triton.eckerd.edu (5.0/SMI-SVR4) id AA08724; Thu, 19 Jun 1997 08:52:13 -0400 Received: from stars1.hanscom.af.mil by smtpgw.hanscom.af.mil (SMI-8.6/SMI-SVR4) id JAA06945; Thu, 19 Jun 1997 09:04:44 -0400 Received: from drizzle.tfs.com by stars1.hanscom.af.mil (SMI-8.6/SMI-SVR4) id JAA25484; Thu, 19 Jun 1997 09:04:29 -0400 Received: from hail.tfs.com by drizzle.tfs.com (SMI-8.6/SMI-SVR4) id JAA22228; Thu, 19 Jun 1997 09:07:42 -0400 Received: by hail.tfs.com (SMI-8.6/SMI-SVR4) id JAA25098; Thu, 19 Jun 1997 09:07:36 -0400 Date: Thu, 19 Jun 1997 09:07:36 -0400 From: gibian@stars1.hanscom.af.mil (Marc S. Gibian) Subject: Re: NIS+ master server forgot that it is the root server! To: moorewr@acasun.eckerd.edu Message-id: <199706191307.JAA25098@hail.tfs.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7bit Content-MD5: 7cm5QrXSPRR4KM5nKKMPFQ==
Sounds like you applied patch 103612-23 which causes Solstice AdminSuite to break in its handling of NIS+ domain. The only option you have at this time, to the best of my knowledge, is backing out 103612-23. There is a new AdminSuite patch in the works by Sun, but I don't think it is released yet. Also, you don't say which versions of AdminSuite and Solaris you are using... this matters when it comes to the AdminSuite patch that corrects this problem...
-Marc
Marc S. Gibian Telos Comsys phone: (617) 377-6350 PRISM/TFS email: gibian@stars1.hanscom.af.mil or is it: gibian@hanscom.af.mil well, maybe: gibianm@hanscom.af.mil and if all else fails: marc.gibian@acm.org
--Boundary_(ID_z6y0GkcAwJ7AOD2AodDltg)--