RE: Security Configuration Settings?

> From: "Wiest, Damian" <[email protected]>
> To: "'Gregory Hicks'" <ghicks>
> Cc: "'[email protected]'" <[email protected]>
> Subject: RE: Security Configuration Settings?
> Date: Fri, 24 Sep 2004 13:36:55 -0500
> 
[...snip...]
> 
> > This tells the system to get ALL user info from LDAP/NIS.  After you
> > add the line, be sure to run pwconv to sync /etc/passwd and
> > /etc/shadow.
> 
> If you use /usr/ucb/vipw to edit /etc/passwd you won't need to run
> /bin/pwconv.

Well, ...  This is true.  But vipw requires that you also edit the
shadow file and add the new entry (or delete the old entry) there.
Since the man page on "shadow" states that

     In  order  to   make   system   administration   manageable,
     /etc/shadow  entries should appear in exactly the same order
     as  /etc/passwd entries;   this  includes  ``+''  and  ``-''
     entries   if   the   compat   source   is  being  used  (see
     nsswitch.conf(4)).

I'd prefer to let the system do the arranging instead of having to
worry about it myself.  "pwconv" does this arranging for me.

Regards,
Gregory hicks

> 
> -Damian

-------------------------------------------------------------------
Gregory Hicks                        | Principal Systems Engineer
Cadence Design Systems               | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1          | Fax:      408.894.3400
San Jose, CA 95134                   | Internet: [email protected]

I am perfectly capable of learning from my mistakes.  I will surely
learn a great deal today.

"A democracy is a sheep and two wolves deciding on what to have for
lunch.  Freedom is a well armed sheep contesting the results of the
decision." - Benjamin Franklin

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton