We have two types of users (a) Local Users (b) NIS Users. After migrating from Solaris to AIX, NIS users are not able to connect to baan using rexec or baanlogin. Rexec gives an error "Can't set credentials". Baanlogin says "Password Expired" (I found a post for a similar issue for LDAP users but not for NIS users)

The SA team found the reason as below for rexec issue:

The logins needs to have a NIS group as its primary gid.

uid=4778(nisuser) gid=816(baan) groups=816(baan), 125(bsp)
Hence, the group "baan" was changed from local to NIS. Now the error while invoking rexec has gone, still baan doesn't connect.

The way to test rexec is on cmd prompt :
rexec <server name> -l <user name> <command>

Does anybody have any experience with NIS users on AIX 5.2?

Thanks!!

Hi Nancy, is anything showing up in the syslog?

Dave

Nothing at all in the syslog.

:D The resolution was pretty straight forward, though took a while to come to it!!

The rule of thumb on AIX is NIS users need to be a part of NIS group as primary. The issue was because NIS users were part of local bsp group.

The resolution was to create an NIS group bsp and make NIS users part of NIS group bsp and local users a part of local group bsp.


:cool: