On Fri, Apr 18, 2008 at 5:03 PM, Eduardo M KALINOWSKI <[EMAIL PROTECTED]> wrote: > Stephane Durieux wrote: > > Hello > > > > I am encountering a problem with a nis server. > > Local root on client can do su user without giving the password > > of the user. > > > > root squashing is enabled. > > > > What can I do > > I do not know if NIS changes something, but the default behavior is that > root can su to any user without giving the password of the user. (And > this is exactly the point of su.)
I think he meant that the root on the NIS client machine can access any nis user account without giving the passwd. So as NIS client root, the command su nis-user logs into the nis-user account without requiring any passwd. I think the client root 'sees' all NIS users as local users. Root squash on the NIS server merely makes sure that the NIS client root cannot access NFS mounted directories. The problem is described here as well: http://blog.taragana.com/index.php/archive/full-disclosure-nis-security-hole-full-access-by-nis-client-root/ I am facing the same problem and haven't found any solution. Arvind -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
