ssh 与 Solaris 10 上的兼容 nis
我有一个工作的Solaris 10服务器，使用ssh和NIS，使用以下配置：
# /etc/nsswitch.conf
passwd: files nis
group: files nis
现在
# /etc/ssh/sshd_config
Protocol 2
Port 22
ListenAddress ::
AllowTcpForwarding no
GatewayPorts no
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost yes
PrintMotd no
KeepAlive yes
SyslogFacility auth
LogLevel info
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
ServerKeyBits 768
KeyRegenerationInterval 3600
StrictModes yes
LoginGraceTime 600
MaxAuthTries 6
MaxAuthTriesLog 3
PermitEmptyPasswords yes
PasswordAuthentication yes
PAMAuthenticationViaKBDInt yes
PermitRootLogin yes
Subsystem sftp /usr/lib/ssh/sftp-server
IgnoreRhosts yes
RhostsAuthentication no
RhostsRSAAuthentication no
RSAAuthentication yes
，我想切换到兼容模式：
# /etc/nsswitch.conf
passwd: compat
group: files nis
我添加了一些用户：
# /etc/passwd
+luke:x:::::
运行pwvcon，然后对用户<进行密码身份验证code>luke 不再起作用（而公钥仍然可以）。
我的设置有问题吗？
i have a working solaris 10 server with ssh and NIS using the following configuration:
# /etc/nsswitch.conf
passwd: files nis
group: files nis
and
# /etc/ssh/sshd_config
Protocol 2
Port 22
ListenAddress ::
AllowTcpForwarding no
GatewayPorts no
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost yes
PrintMotd no
KeepAlive yes
SyslogFacility auth
LogLevel info
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
ServerKeyBits 768
KeyRegenerationInterval 3600
StrictModes yes
LoginGraceTime 600
MaxAuthTries 6
MaxAuthTriesLog 3
PermitEmptyPasswords yes
PasswordAuthentication yes
PAMAuthenticationViaKBDInt yes
PermitRootLogin yes
Subsystem sftp /usr/lib/ssh/sftp-server
IgnoreRhosts yes
RhostsAuthentication no
RhostsRSAAuthentication no
RSAAuthentication yes
Now, i want to switch to compat mode:
# /etc/nsswitch.conf
passwd: compat
group: files nis
I added a few users to:
# /etc/passwd
+luke:x:::::
ran pwvcon and then password authentification for user luke doesn't not work anymore (while public-key is still OK).
Is there something wrong with my setup ?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
来自
passwd(4)：您可以看看删除 passwd 列中的“x”并再次运行 pwconv 是否有帮助？
编辑：第一个猜测完全错误，请参阅评论，所以这是另一个猜测 - 我现在无法破坏我的 Sun 的配置，抱歉；）
From
passwd(4):Can you see if removing the "x" in the passwd-column and running pwconv again helps?
Edit: the first guess was totally off, see comments, so here's another guess -- I can't break my Sun's config just now, sorry ;)