Patch-ID# 101582-03
Keywords: passwd aging nis+ security
Synopsis: SunOS 5.3: POINT PATCH: Password aging & NIS+ don't work (together)
Date: Apr/29/94

Solaris Release: 2.3

SunOS Release: 5.3

Unbundled Product:

Unbundled Release:

Topic: SunOS 5.3: POINT PATCH: Password aging & NIS+ don't work (together)

           Note:
           As a point patch, this fix is not currently scheduled nor
           will necessarily be approved for integration in a future
           SunOS release.

BugId's fixed with this patch: 1091205

Changes incorporated in this version:

Relevant Architectures: sparc

Patches accumulated and obsoleted by this patch:

Patches which conflict with this patch:

Patches required with this patch:

Obsoleted by:

Files included with this patch:

/usr/bin/login
/usr/lib/passwd_changer

Problem Description:

1091205 Password aging & NIS+ don't work

Password aging (as shown in the shadow(4) man page) doesn't work when
you have NIS+ as your name service.

(This revision of the patch is to fix a problem with the previous patch)
It does a setuid() after fork() and before exec()ing the passwd program.
But now that it calls nispasswd(1) through the /usr/lib/passwd_changer
shell script you can't just setuid() you must do a keylogin or the User
has NO credential and thus cannot change their NIS+ password.

Patch Installation Instructions:
--------------------------------
Generic 'installpatch' and 'backoutpatch' scripts are provided
within each patch package with instructions appended to this section.
Other specific or unique installation instructions may also be
necessary and should be described below.

Special Install Instructions:
-----------------------------

Please read the file named PATCH_DESC.1091205 that came with this patch
for a complete description of the patch and for special setup procedures.