Debian Bug report logs - #48447
nis: Merging the shadow files is the default and not merging gshadow is broken

version graph

Package: nis; Maintainer for nis is Francesco Paolo Lovergine <frankie@debian.org>; Source for nis is src:nis (PTS, buildd, popcon).

Reported by: Teddy Hogeborn <teddy@recompile.se>

Date: Wed, 27 Oct 1999 07:03:00 UTC

Severity: normal

Found in version 3.5-1

Fixed in version nis/3.6-2

Done: Miquel van Smoorenburg <miquels@cistron.nl>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Miquel van Smoorenburg <miquels@cistron.nl>:
Bug#48447; Package nis. (full text, mbox, link).

Acknowledgement sent to Teddy Hogeborn <teddy@fukt.hk-r.se>:
New Bug report received and forwarded. Copy sent to Miquel van Smoorenburg <miquels@cistron.nl>. (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Teddy Hogeborn <teddy@fukt.hk-r.se>
To: submit@bugs.debian.org
Subject: nis: Merging the shadow files is the default and not merging gshadow is broken
Date: Wed, 27 Oct 1999 08:51:52 +0200
Package: nis
Version: 3.5-1

Since the previous release of the nis package for the "stable" branch
(3.3.1-1) did not even have an option for merging the passwd and
shadow files (and the group and the gshadow files), making merging the
default in the /var/yp/Makefile in nis 3.5-1 does not make sense.
This is just supposed to be a security update for stable, right?

Plus, when I set MERGE_GROUP to "false", I get "sh: @/usr/bin/awk: No
such file or directory" messages, and the maps do not get built.

May I recommend the following patch?

*** Makefile.~1~	Tue Oct 26 22:34:35 1999
--- Makefile	Wed Oct 27 08:37:29 1999
***************
*** 31,41 ****
  
  # Should we merge the passwd file with the shadow file ?
  # MERGE_PASSWD=true|false
! MERGE_PASSWD=true
  
  # Should we merge the group file with the gshadow file ?
  # MERGE_GROUP=true|false
! MERGE_GROUP=true
  
  # These are commands which this Makefile needs to properly rebuild the
  # NIS databases. Don't change these unless you have a good reason.
--- 31,41 ----
  
  # Should we merge the passwd file with the shadow file ?
  # MERGE_PASSWD=true|false
! MERGE_PASSWD=false
  
  # Should we merge the group file with the gshadow file ?
  # MERGE_GROUP=true|false
! MERGE_GROUP=false
  
  # These are commands which this Makefile needs to properly rebuild the
  # NIS databases. Don't change these unless you have a good reason.
***************
*** 334,340 ****
  group.byname: $(GROUP) $(YPDIR)/Makefile
  	@echo "Updating $@..."
  	@$(UMASK); \
! 	@$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
  					print $$1"\t"$$0 }' $(GROUP) \
  		| $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
  	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
--- 334,340 ----
  group.byname: $(GROUP) $(YPDIR)/Makefile
  	@echo "Updating $@..."
  	@$(UMASK); \
! 	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
  					print $$1"\t"$$0 }' $(GROUP) \
  		| $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
  	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
***************
*** 342,348 ****
  group.bygid: $(GROUP) $(YPDIR)/Makefile
  	@echo "Updating $@..."
  	@$(UMASK); \
! 	@$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
  					print $$3"\t"$$0 }' $(GROUP) \
  		| $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
  	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
--- 342,348 ----
  group.bygid: $(GROUP) $(YPDIR)/Makefile
  	@echo "Updating $@..."
  	@$(UMASK); \
! 	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
  					print $$3"\t"$$0 }' $(GROUP) \
  		| $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
  	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@

/Teddy, who nevertheless appreciates the quick response to the ypserv
vulnerability.

-- System Information
Debian Release: 2.1
Kernel Version: Linux nigol 2.2.13 #1 Thu Oct 21 00:09:18 MEST 1999 i486 unknown

Versions of the packages nis depends on:
ii  libc6           2.0.7.19981211 GNU C Library: shared libraries
ii  libgdbmg1       1.7.3-25       GNU dbm database routines (runtime version).
ii  netbase         3.12-2         Basic TCP/IP networking binaries
ii  make            3.77-4         The GNU version of the "make" utility.

--- Begin /etc/init.d/nis (modified conffile)
#!/bin/sh
#
#
#
NISSERVER=master
NET="/usr/sbin"
test -f ${NET}/ypbind -a -f /etc/defaultdomain || exit 0
start ()
{
	domainname `cat /etc/defaultdomain`
	echo "Setting NIS domainname to: `domainname`"
	echo -n "Starting NIS services: "
	if [ "$NISSERVER" != "false" ]
	then
		echo -n "ypserv "
		start-stop-daemon --start --quiet \
			--pidfile /var/run/ypserv.pid --exec ${NET}/ypserv
	fi
	if [ "$NISSERVER" = master ]
	then
		echo -n "yppasswdd "
		start-stop-daemon --start --quiet \
			--exec ${NET}/rpc.yppasswdd -- -e chsh
		echo -n "ypxfrd "
		start-stop-daemon --start --quiet \
			--exec ${NET}/rpc.ypxfrd
	fi
	if egrep -q '^(ypserver|domain)' /etc/yp.conf
	then
		broadcast=""
	else
		broadcast="-broadcast"
	fi
	echo -n "ypbind "
	start-stop-daemon --start --quiet --exec ${NET}/ypbind -- $broadcast
	echo
}
stop () {
	start-stop-daemon --stop --quiet --oknodo --exec /usr/sbin/ypbind
	start-stop-daemon --stop --quiet --oknodo \
		--pidfile /var/run/ypserv.pid --exec /usr/sbin/ypserv
	start-stop-daemon --stop --quiet --oknodo \
		--exec /usr/sbin/rpc.yppasswdd
	start-stop-daemon --stop --quiet --oknodo \
		--exec /usr/sbin/rpc.ypxfrd
}
case "$1" in
  start)
	start;
	;;
  stop)
	stop
	;;
  reload|force-reload)
	start-stop-daemon --stop --quiet --oknodo --signal 1 \
		--pidfile /var/run/ypserv.pid --exec /usr/sbin/ypserv
	;;
  restart)
	stop
	sleep 2
	start
	;;
  *)
	echo "Usage: /etc/init.d/nis {start|stop|reload|force-reload|restart}"
	exit 1
esac
exit 0

--- End /etc/init.d/nis

--- Begin /etc/ypserv.securenets (modified conffile)
#
#
#
255.0.0.0	127.0.0.0
host		194.47.143.2
host		194.47.143.3
host		194.47.143.4
host		194.47.143.5
host		194.47.143.6
host		194.47.143.7
host		194.47.143.8
host		194.47.143.9
host		194.47.144.2
host		194.47.144.10
host		194.47.144.12
host		194.47.144.13
host		194.47.144.14
host		194.47.144.15
host		194.47.144.16
host		194.47.144.20
host		194.47.144.24
host		194.47.144.27
host		194.47.144.28
host		194.47.144.29

--- End /etc/ypserv.securenets

--- Begin /etc/yp.conf (modified conffile)
#
#
#
ypserver localhost

--- End /etc/yp.conf

--- Begin /var/yp/Makefile (modified conffile)
#
#
#
#
B=
NOPUSH=false
MINUID=100
MINGID=1000
MERGE_PASSWD=false
MERGE_GROUP=false
AWK = /usr/bin/awk
MAKE = /usr/bin/make
UMASK = umask 066
#
#
YPSRCDIR = /etc
YPPWDDIR = /etc
YPBINDIR = /usr/lib/yp
YPSBINDIR = /usr/sbin
YPDIR = /var/yp
YPMAPDIR = $(YPDIR)/$(DOMAIN)
#
GROUP       = $(YPPWDDIR)/group
PASSWD      = $(YPPWDDIR)/passwd
SHADOW	    = $(YPPWDDIR)/shadow
GSHADOW     = $(YPPWDDIR)/gshadow
ADJUNCT     = $(YPPWDDIR)/passwd.adjunct
ALIASES     = /etc/mail/aliases
ETHERS      = $(YPSRCDIR)/ethers     # ethernet addresses (for rarpd)
BOOTPARAMS  = $(YPSRCDIR)/bootparams # for booting Sun boxes (bootparamd)
HOSTS       = $(YPSRCDIR)/hosts
NETWORKS    = $(YPSRCDIR)/networks
PRINTCAP    = $(YPSRCDIR)/printcap
PROTOCOLS   = $(YPSRCDIR)/protocols
PUBLICKEYS  = $(YPSRCDIR)/publickey
RPC 	    = $(YPSRCDIR)/rpc
SERVICES    = $(YPSRCDIR)/services
NETGROUP    = $(YPSRCDIR)/netgroup
NETID	    = $(YPSRCDIR)/netid
AMD_HOME    = $(YPSRCDIR)/amd.home
AUTO_MASTER = $(YPSRCDIR)/auto.master
AUTO_HOME   = $(YPSRCDIR)/auto.home
YPSERVERS = $(YPDIR)/ypservers	# List of all NIS servers for a domain
target: Makefile
	@test ! -d $(LOCALDOMAIN) && mkdir $(LOCALDOMAIN) ; \
	cd $(LOCALDOMAIN)  ; \
	$(NOPUSH) || $(MAKE) -f ../Makefile ypservers; \
	$(MAKE) -f ../Makefile all
all:	passwd group hosts rpc services netid protocols netgrp \
	networks shadow auto.master auto.home # publickey mail ethers \
	bootparams printcap amd.home passwd.adjunct
DBLOAD = /usr/lib/yp/makedbm -c -m `$(YPBINDIR)/yphelper --hostname`
MKNETID = $(YPBINDIR)/mknetid
YPPUSH = $(YPSBINDIR)/yppush
MERGER = $(YPBINDIR)/yphelper
DOMAIN = `basename \`pwd\``
LOCALDOMAIN = `/bin/domainname`
REVNETGROUP = $(YPBINDIR)/revnetgroup
CREATE_PRINTCAP = $(YPBINDIR)/create_printcap
ethers:	   	ethers.byname ethers.byaddr
hosts:	   	hosts.byname hosts.byaddr
networks:  	networks.byaddr networks.byname
protocols: 	protocols.bynumber protocols.byname
rpc:	   	rpc.byname rpc.bynumber
services:  	services.byname
passwd:    	passwd.byname passwd.byuid
group:     	group.byname group.bygid
shadow:	   	shadow.byname
passwd.adjunct:	passwd.adjunct.byname
netid:	   	netid.byname
netgrp:	   	netgroup netgroup.byhost netgroup.byuser
publickey: 	publickey.byname
mail:	   	mail.aliases
ypservers: $(YPSERVERS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 != "" && $$1 !~ "#") print $$0"\t"$$0 }' \
	    $(YPSERVERS) | $(DBLOAD) -i $(YPSERVERS) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
$(YPSERVERS):
	@echo -n "Generating $*..."
	@uname -n > $(YPSERVERS)
bootparams: $(BOOTPARAMS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 != "" && $$1 !~ "#" && $$1 != "+") \
		print $$0 }' $(BOOTPARAMS) | $(DBLOAD) -r -i $(BOOTPARAMS) \
		 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
ethers.byname: $(ETHERS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 != "" && $$1 !~ "#" && $$1 != "+") \
		print $$2"\t"$$0 }' $(ETHERS) | $(DBLOAD) -r -i $(ETHERS) \
						-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
ethers.byaddr: $(ETHERS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 != "" && $$1 !~ "#" && $$1 != "+") \
		print $$1"\t"$$0 }' $(ETHERS) | $(DBLOAD) -r -i $(ETHERS) \
						-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
netgroup: $(NETGROUP) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 != "" && $$1 !~ "#" && $$1 != "+") \
		print $$0 }' $(NETGROUP) | $(DBLOAD) -i $(NETGROUP) \
		 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
netgroup.byhost: $(NETGROUP) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(REVNETGROUP) -h < $(NETGROUP) | $(DBLOAD) -i $(NETGROUP) \
		-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
netgroup.byuser: $(NETGROUP) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(REVNETGROUP) -u < $(NETGROUP) | $(DBLOAD) -i $(NETGROUP) \
		-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
hosts.byname: $(HOSTS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '/^[0-9]/ { for (n=2; n<=NF && $$n !~ "#"; n++) \
		print $$n"\t"$$0 }' $(HOSTS) | $(DBLOAD) -r $(B) -l \
			-i $(HOSTS) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
hosts.byaddr: $(HOSTS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#" && $$1 != "") print $$1"\t"$$0 }' \
	   $(HOSTS) | $(DBLOAD) -r $(B) -i $(HOSTS) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
networks.byname: $(NETWORKS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if($$1 !~ "#" && $$1 != "") { print $$1"\t"$$0; \
		 for (n=3; n<=NF && $$n !~ "#"; n++) print $$n"\t"$$0 \
			}}' $(NETWORKS) | $(DBLOAD) -r -i $(NETWORKS) \
			 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
networks.byaddr: $(NETWORKS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#" && $$1 != "") print $$2"\t"$$0 }' \
		 $(NETWORKS) | $(DBLOAD) -r -i $(NETWORKS) \
		 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
protocols.byname: $(PROTOCOLS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#" && $$1 != "") { print $$1"\t"$$0; \
		for (n=3; n<=NF && $$n !~ "#"; n++) \
		print $$n"\t"$$0}}' $(PROTOCOLS) | $(DBLOAD) -r -i \
			$(PROTOCOLS) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
protocols.bynumber: $(PROTOCOLS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#" && $$1 != "") print $$2"\t"$$0 }' \
		$(PROTOCOLS) | $(DBLOAD) -r -i $(PROTOCOLS) \
		 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
rpc.byname: $(RPC) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#"  && $$1 != "") { print $$1"\t"$$0; \
		for (n=3; n<=NF && $$n !~ "#"; n++)  print $$n"\t"$$0 \
		  }}' $(RPC) | $(DBLOAD) -r -i $(RPC) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
rpc.bynumber: $(RPC) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#" && $$1 != "") print $$2"\t"$$0 }' $(RPC) \
		| $(DBLOAD) -r -i $(RPC) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
services.byname: $(SERVICES) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 !~ "#" && $$1 != "") print $$2"\t"$$0 }' \
		$(SERVICES) | $(DBLOAD) -r -i $(SERVICES) \
		-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
ifeq (x$(MERGE_PASSWD),xtrue)
passwd.byname: $(PASSWD) $(SHADOW) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(MERGER) -p $(PASSWD) $(SHADOW) | \
	   $(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINUID) ) \
	   print $$1"\t"$$0 }' | $(DBLOAD) -i $(PASSWD) \
		-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
passwd.byuid: $(PASSWD) $(SHADOW) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(MERGER) -p $(PASSWD) $(SHADOW) | \
	   $(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINUID) ) \
	   print $$3"\t"$$0 }' | $(DBLOAD) -i $(PASSWD) \
		 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
shadow.byname:
	@echo "Updating $@... Ignored -> merged with passwd"
else
passwd.byname: $(PASSWD) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINUID) ) \
	   print $$1"\t"$$0 }' $(PASSWD) | $(DBLOAD) -i $(PASSWD) \
		-o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
passwd.byuid: $(PASSWD) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINUID) ) \
	   print $$3"\t"$$0 }' $(PASSWD) | $(DBLOAD) -i $(PASSWD) \
		 -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
shadow.byname: $(SHADOW) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" ) print $$1"\t"$$0 }' \
		$(SHADOW) | $(DBLOAD) -s -i $(SHADOW) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
endif
passwd.adjunct.byname: $(ADJUNCT) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" ) print $$1"\t"$$0 }' \
		$(ADJUNCT) | $(DBLOAD) -s -i $(ADJUNCT) -o $(YPMAPDIR)/$@ - $@
	@chmod 700 $(YPDIR)/$(DOMAIN)/$@*
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
ifeq (x$(MERGE_GROUP),xtrue)
group.byname: $(GROUP) $(GSHADOW) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(MERGER) -g $(GROUP) $(GSHADOW) | \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
	print $$1"\t"$$0 }' | $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
group.bygid: $(GROUP) $(GSHADOW) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(MERGER) -g $(GROUP) $(GSHADOW) | \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
	print $$3"\t"$$0 }' | $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
else
group.byname: $(GROUP) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
					print $$1"\t"$$0 }' $(GROUP) \
		| $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
group.bygid: $(GROUP) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(UMASK); \
	$(AWK) -F: '!/^[-+#]/ { if ($$1 != "" && $$3 >= $(MINGID) ) \
					print $$3"\t"$$0 }' $(GROUP) \
		| $(DBLOAD) -i $(GROUP) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
endif
$(NETID):
netid.byname: $(GROUP) $(PASSWD) $(HOSTS) $(NETID) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(MKNETID) -q -p $(PASSWD) -g $(GROUP) -h $(HOSTS) -d $(DOMAIN) \
		-n $(NETID) | $(DBLOAD) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
mail.aliases: $(ALIASES) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if ($$1 != "" && $$1 !~ "#" && $$1 != "+") \
		print $$0 }' $(ALIASES) | $(DBLOAD) --aliases \
			-i $(ALIASES) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
publickey.byname: $(PUBLICKEYS) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(AWK) '{ if($$1 !~ "#" && $$1 != "") { print $$1"\t"$$2 }}' \
		$(PUBLICKEYS) | $(DBLOAD) -i $(PUBLICKEYS) \
		 -o $(YPMAPDIR)/$@ - $@
	@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
printcap: $(PRINTCAP) $(YPDIR)/Makefile
	@echo "Updating $@..."
	@$(CREATE_PRINTCAP) < $(PRINTCAP) | \
		$(DBLOAD) -i $(PRINTCAP) -o $(YPMAPDIR)/$@ - $@
	@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
auto.master: $(AUTO_MASTER) $(YPDIR)/Makefile
	@echo "Updating $@..."
	-@sed -e "/^#/d" -e s/#.*$$// $(AUTO_MASTER) | $(DBLOAD) \
		-i $(AUTO_MASTER) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
auto.home: $(AUTO_HOME) $(YPDIR)/Makefile
	@echo "Updating $@..."
	-@sed -e "/^#/d" -e s/#.*$$// $(AUTO_HOME) | $(DBLOAD) \
		-i $(AUTO_HOME) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@
amd.home: $(AMD_HOME) $(YPDIR)/Makefile
	@echo "Updating $@..."
	-@sed -e "s/#.*$$//" -e "/^$$/d" $(AMD_HOME) | \
	$(AWK) '{\
		for (i = 1; i <= NF; i++)\
		   if (i == NF) { \
		      if (substr($$i, length($$i), 1) == "\\") \
	                   printf("%s", substr($$i, 1, length($$i) -1)); \
	               else \
			  printf("%s\n",$$i); \
	              } \
		   else \
		      printf("%s ",$$i);\
		}' | $(DBLOAD) -i $(AMD_HOME) -o $(YPMAPDIR)/$@ - $@
	-@$(NOPUSH) || $(YPPUSH) -d $(DOMAIN) $@

--- End /var/yp/Makefile

Information forwarded to debian-bugs-dist@lists.debian.org, Miquel van Smoorenburg <miquels@cistron.nl>:
Bug#48447; Package nis. (full text, mbox, link).

Acknowledgement sent to miquels@cistron.nl (Miquel van Smoorenburg):
Extra info received and forwarded to list. Copy sent to Miquel van Smoorenburg <miquels@cistron.nl>. (full text, mbox, link).

Message #10 received at submit@bugs.debian.org (full text, mbox, reply):

From: miquels@cistron.nl (Miquel van Smoorenburg)
To: submit@bugs.debian.org
Subject: Re: Bug#48447: nis: Merging the shadow files is the default and not merging gshadow is broken
Date: 27 Oct 1999 11:09:43 +0200
In article <cistron.199910270651.IAA25479@nigol.fukt.hk-r.se>,
Teddy Hogeborn  <teddy@fukt.hk-r.se> wrote:
>Since the previous release of the nis package for the "stable" branch
>(3.3.1-1) did not even have an option for merging the passwd and
>shadow files (and the group and the gshadow files), making merging the
>default in the /var/yp/Makefile in nis 3.5-1 does not make sense.

Nope

>This is just supposed to be a security update for stable, right?

Yes.

>Plus, when I set MERGE_GROUP to "false", I get "sh: @/usr/bin/awk: No
>such file or directory" messages, and the maps do not get built.

Duh there's a couple of bugs in the Makefile too. I think Thorsten
rushed the new ypserv package out of the door as well...

Mike.
-- 
First things first, but not necessarily in that order.

Information forwarded to debian-bugs-dist@lists.debian.org, Miquel van Smoorenburg <miquels@cistron.nl>:
Bug#48447; Package nis. (full text, mbox, link).

Acknowledgement sent to Wichert Akkerman <wichert@liacs.nl>:
Extra info received and forwarded to list. Copy sent to Miquel van Smoorenburg <miquels@cistron.nl>. (full text, mbox, link).

Message #15 received at 48447@bugs.debian.org (full text, mbox, reply):

From: Wichert Akkerman <wichert@liacs.nl>
To: Miquel van Smoorenburg <miquels@cistron.nl>, 48447@bugs.debian.org
Subject: Re: Bug#48447: nis: Merging the shadow files is the default and not merging gshadow is broken
Date: Wed, 27 Oct 1999 15:05:37 +0200
[Message part 1 (text/plain, inline)]
Previously Miquel van Smoorenburg wrote:
> Duh there's a couple of bugs in the Makefile too. I think Thorsten
> rushed the new ypserv package out of the door as well...

Grrr... does that mean we need a new version of nis before we make a
security announcement?

Wichert.

-- 
   ________________________________________________________________
 / Generally uninteresting signature - ignore at your convenience  \
| wichert@liacs.nl                    http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |

[Message part 2 (application/pgp-signature, inline)]

Reply sent to Miquel van Smoorenburg <miquels@cistron.nl>:
You have taken responsibility. (full text, mbox, link).

Notification sent to Teddy Hogeborn <teddy@fukt.hk-r.se>:
Bug acknowledged by developer. (full text, mbox, link).

Message #20 received at 48447-close@bugs.debian.org (full text, mbox, reply):

From: Miquel van Smoorenburg <miquels@cistron.nl>
To: 48447-close@bugs.debian.org
Subject: Bug#48447: fixed in nis 3.6-2
Date: 27 Oct 1999 18:59:24 -0000
We believe that the bug you reported is fixed in the latest version of
nis, which has been installed in the Debian FTP archive:
nis_3.6-2_i386.deb
  to dists/potato/main/binary-i386/net/nis_3.6-2.deb
  replacing nis_3.6-1.deb
nis_3.6-2.diff.gz
  to dists/potato/main/source/net/nis_3.6-2.diff.gz
  replacing nis_3.6-1.diff.gz
nis_3.6-2.dsc
  to dists/potato/main/source/net/nis_3.6-2.dsc
  replacing nis_3.6-1.dsc

Note that this package is not part of the released stable Debian
distribution.  It may have dependencies on other unreleased software,
or other instabilities.  Please take care if you wish to install it.
The update will eventually make its way into the next released Debian
distribution.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 48447@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Miquel van Smoorenburg <miquels@cistron.nl> (supplier of updated nis package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----

Format: 1.6
Date: Wed, 27 Oct 1999 11:09:42 +0200
Source: nis
Binary: nis
Architecture: source i386
Version: 3.6-2
Distribution: unstable
Urgency: high
Maintainer: Miquel van Smoorenburg <miquels@cistron.nl>
Description: 
 nis        - Clients and daemons for the Network Information Services (NIS).
Closes: 48442 48447
Changes: 
 nis (3.6-2) unstable; urgency=high
 .
   * Touch yp-tools-2.4/configure (closes: #48442)
   * Fix /var/yp/Makefile (closes: #48447)
Files: 
 dda09b022d3ac9915f36a428a0d308b7 565 net extra nis_3.6-2.dsc
 3ae4a5d9dd18e41ba912caf23747d845 13064 net extra nis_3.6-2.diff.gz
 09f7ccbd78563995492fb11ce2cae6f9 164876 net extra nis_3.6-2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1

iQB1AwUBOBbDq1iLscT2F1RZAQGkUgL8DKCX01BTKXctbdE4drL4zz7j7ipag6yX
QMDEuKpRvSr/IiOSXx7cNdZXfokDaA5YdOZwC+FRi8jdX1Ve6+aJY8al+LBpu9Ou
Tm2RImxGf9OZME2s5kqTcynUqyVhbWve
=XKry
-----END PGP SIGNATURE-----

Bug unarchived. Request was from Teddy Hogeborn <teddy@fukt.bsnet.se> to control@bugs.debian.org. (Sat, 29 Nov 2008 21:34:26 GMT) (full text, mbox, link).

Changed Bug submitter from Teddy Hogeborn <teddy@fukt.hk-r.se> to Teddy Hogeborn <teddy@fukt.bsnet.se>. Request was from Teddy Hogeborn <teddy@fukt.bsnet.se> to control@bugs.debian.org. (Sat, 29 Nov 2008 21:34:26 GMT) (full text, mbox, link).

Bug archived. Request was from Teddy Hogeborn <teddy@fukt.bsnet.se> to control@bugs.debian.org. (Sat, 29 Nov 2008 21:34:30 GMT) (full text, mbox, link).

Bug unarchived. Request was from Teddy Hogeborn <teddy@recompile.se> to control@bugs.debian.org. (Mon, 10 Oct 2011 08:03:31 GMT) (full text, mbox, link).

Changed Bug submitter to 'Teddy Hogeborn <teddy@recompile.se>' from 'Teddy Hogeborn <teddy@fukt.bsnet.se>' Request was from Teddy Hogeborn <teddy@recompile.se> to control@bugs.debian.org. (Mon, 10 Oct 2011 08:03:31 GMT) (full text, mbox, link).

Bug archived. Request was from Teddy Hogeborn <teddy@recompile.se> to control@bugs.debian.org. (Mon, 10 Oct 2011 08:03:32 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Jul 1 13:13:51 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.