配置nis 报错，不能修改密码

comdaze

配置nis
1.  client端:  passwd, yppasswd 都可以,无论用root修改还是用户自己登陆修改都没问题,一切都正常
2. server端: a. 用root或是用户帐号,使用yppasswd,密码修改正常,无报错,且勿须ypinit或是make,密码修改完就在整个nis环境生效
                  b. 用root或是用户帐号,使用passwd,密码有时能完成修改,但有"passwd: Failed preliminary check by password service "报
                      错,同 样勿 须ypinit或是make,密码只要修改成功就在整个nis环境生效

报错只在nis master上,nis client 一切正常.
[aa@zch39mcrc03 aa]$ passwd
Changing password for user aa.
Changing password for aa
(current) UNIX password:
New password:
Retype new password:
RPC: Timed out
The password has not been changed on zch39mcrc03.
passwd: Failed preliminary check by password service

[root@zch39mcrc03 log]# passwd aa
Changing password for user aa.
New password:
Retype new password:
RPC: Can't encode arguments
The password has not been changed on zch39mcrc03.
passwd: Failed preliminary check by password service

虽然报错,但事实上密码是改掉了.用yppasswd则是成功的.

在client server上无论是passwd,还是yppasswd都成功.

我查了些资料,原因好象是master server的pam不能通过passwd命令识别是修改local还是nis帐号.

请问怎么样可以消除这个报错信息呢?

comdaze

顺便说一句，我的系统是redhat as3

zaiwen

I did some tests. Maybe you are running "passwd nisuser" on the client side.  I got the same error as you said. This is correct behavior, because you can't use "passwd" to change NIS user password from the client side.  You have to use "yppasswd".

If you are on server side, you can use passwd first to change local user password, then run /var/yp/make to update its NIS password.  If you don't run /var/yp/make after passwd, this user's NIS password is different from its local password.