Issues with adding / removing users
john rutledge
worth). We have several AIX p630 machines in a NIS domain. I'm having
problems in thaty some users cannot be modified nor delted via smitty
nor the command line:
Example:
# userdel jwright
3004-696 Error removing "jwright".
- or -
# usermod -g gws jwright
3004-692 Error changing "pgrp" to "gws" : Value is invalid.
Yet an excerpt from /etc/group yields:
gws:!:10003:<user1>,<user2>, etc
+:
My management wants me to open a PMR with IBM, yet I think this is
likely user error. BTW, his password registry is NIS, if that
matters...
Nicholas Dronen
jr> I'm new to AIX, but fairly familiar with Linux (for what that's
jr> worth). We have several AIX p630 machines in a NIS domain. I'm having
jr> problems in thaty some users cannot be modified nor delted via smitty
jr> nor the command line:
jr> Example:
jr> # userdel jwright
jr> 3004-696 Error removing "jwright".
jr> - or -
jr> # usermod -g gws jwright
jr> 3004-692 Error changing "pgrp" to "gws" : Value is invalid.
jr> Yet an excerpt from /etc/group yields:
jr> gws:!:10003:<user1>,<user2>, etc
jr> My management wants me to open a PMR with IBM, yet I think this is
jr> likely user error. BTW, his password registry is NIS, if that
jr> matters...
Are you doing this on the NIS master? If not, have you tried
running the commands there? Also, usermod and userdel are newer
SysV-ish commands that IBM introduced for Solaris and Linux admins
and the like. I'd try running rmuser and chuser instead to see
if they behave differently.
Regards,
Nicholas
--
"Why shouldn't I top-post?" http://www.aglami.com/tpfaq.html
"Meanings are another story." http://www.ifas.org/wa/glossolalia.html
john rutledge
> Are you doing this on the NIS master?
Yes, I am / was.
> running the commands there? Also, usermod and userdel are newer
> SysV-ish commands that IBM introduced for Solaris and Linux admins
> and the like. I'd try running rmuser and chuser instead to see
> if they behave differently.
Just tried those, same thing:
# chuser pgrp=group1 jwright
3004-692 Error changing "pgrp" to "group1" : Value is invalid.
# rmuser jwright
3004-696 Error removing "jwright".
I appreciate your help! I wouldn't have known about those commands otherwise...
Other ideas?
JR
Nicholas Dronen
jr> Nicholas Dronen <ndr...@io.frii.com> wrote
>> Are you doing this on the NIS master?
jr> Yes, I am / was.
>> running the commands there? Also, usermod and userdel are newer
>> SysV-ish commands that IBM introduced for Solaris and Linux admins
>> and the like. I'd try running rmuser and chuser instead to see
>> if they behave differently.
jr> Just tried those, same thing:
jr> # chuser pgrp=group1 jwright
jr> 3004-692 Error changing "pgrp" to "group1" : Value is invalid.
jr> # rmuser jwright
jr> 3004-696 Error removing "jwright".
jr> I appreciate your help! I wouldn't have known about those commands otherwise...
OK. Take a look at the man page for chuser, especially the
parts about NIS. It appears that you cannot use chuser to
do this if the system is configured to use NIS.
Is the NIS master a client of itself? If so, chuser and friends
simply won't work. You'll need to unconfigure the NIS master
not to use NIS, then use rmuser, chuser, and so on to change
the local user database files, *then* update the NIS registry.
john rutledge
> Is the NIS master a client of itself? If so, chuser and friends
> simply won't work. You'll need to unconfigure the NIS master
> not to use NIS, then use rmuser, chuser, and so on to change
> the local user database files, *then* update the NIS registry.
>
> Regards,
>
> Nicholas
Thanks for your response. I actually had to do much of what you
suggested in the last paragraph. The only other thing is that we had
to remove registry=NIS from the /etc/security/user file before
rebuilding. We also ran "usrck" and "grpck" to resolve any
discrepancies.
Finally, you're right (no suprise, I'm sure) that the master should
not be a client of itself (for a slave server this seems to be
different) but SHOULD be in the domain.
Anyway, we are back and stable with the proper setup.
Thx again, JR