[OpenAFS-port-darwin] NIS accounts and LoginWindow PlugIn

[Tim C.]

  It actually does work fine.  I think what you're missing is under the
Directory Access program, you have to select NIS for the Authentication
and Contacts for the loginwindow to know about the users.  You can check
out a page I wrote with how to set everything up with afs and nis for a
lab type environment at:

http://www.gl.umbc.edu/root/macosx/

Might give some help.

Tim

Eric Knauel said:
>
> Hi,
>
> I'm wondering if anyone has tried using the LoginWindow PlugIn in
> connection with NIS accounts? Users that have a "local" account (there
> is an entry for this user in the NetInfo database) can login using
> LoginWindow and get their tokens. However, if a user is not "local",
> but has a NIS entry LoginWindow fails and drops to the console
> login. /var/log/system.log looks like this:
>
> Jul 16 09:21:42 robinson loginwindow[355]: AuthorizationRef doesn't have a
> userID
> Jul 16 09:21:42 robinson loginwindow[355]: exiting to console
> Jul 16 09:21:42 robinson WindowServer[191]: loginwindow connection closed;
> closing server.
> Jul 16 09:21:42 robinson
> /System/Library/CoreServices/SecurityAgent.app/Contents/MacOS/SecurityAgent:
> (ipc/send) invalid destination port : CGSFlushWindowContentRegion: flush
> failed
>
> All users, local and NIS users, can login via SSH. So it seems to me
> that there is a problem with LoginWindow or the PlugIn. The
> lookupd.conf entry for users looks like this:
>
> {
> "name" = ( "users" );
> "LookupOrder" = ( "CacheAgent", "NIAgent", "YPAgent" );
> },
>
> Why is it a problem for LoginWindow oder the PlugIn if there is no
> local account data? Why does it say that there's is a userID missing?
>
> -Eric
> --
> "Excuse me --- Di Du Du Duuuuh Di Dii --- Huh Weeeheeee" (Albert King)
> _______________________________________________
> port-darwin mailing list
> port-darwin@openafs.org
> https://lists.openafs.org/mailman/listinfo/port-darwin
>


-----------------------------------------------------------------------
Tim Craig            These are my opinions and not my employers. :)
OIT-Systems
tim@umbc.edu         It's hard to be serious when you're
                       naked. - Garfield
-----------------------------------------------------------------------