[INUG-Users] [NCO_PA] User 'netcool' is unknown onthis system.Login Rejected.

[Alex Greenbank]

Hello,

A less drastic method is to grant read access to /etc/shadow to just the 
netcool user (or whichever non-root user you're running nco_pad as) using 
the setfacl command in Solaris (Solaris 9 and above I think).

But, again, you must consider the security ramifications of this.

Regards,

-Alex

users-bounces at netcoolusers.org wrote on 09/01/2008 15:54:31:

> Just make sure you know the security ramifications of changing access 
> to the /etc/shadow file.
> 
> Jacob
> 
> Quoting "BONNES, Benjamin" <benjamin.bonnes at capgemini.com>:
> 
> >
> > I don't understand why the answer I've sent didn't work. But here 
again
> > my suggestion:
> >
> > Try to give the read permission to /etc/shadow and /etc/passwd file to
> > the user who launched nco_pad.
> >
> > Best Regards.
> >
> > ______________________________________________________
> >
> > Benjamin Bonnes | Capgemini Telecom & Media
> > Omantel Project
> >
> >
> > -----Original Message-----
> > From: users-bounces at netcoolusers.org
> > [mailto:users-bounces at netcoolusers.org] On Behalf Of Jian TJ Tan
> > Sent: Wednesday, January 09, 2008 6:16 PM
> > To: users at netcoolusers.org
> > Subject: Re: [INUG-Users] [NCO_PA] User 'netcool' is unknown onthis
> > system.Login Rejected.
> >
> >
> > Yes, it is already ncoadmin group user.
> > I already did:
> >       1 add netcool user to ncoadmin group
> >       2 modify omni.dat --> interfaces.solars2
> >       3 modify nco_pa.conf
> > I just wonder if solaris10 authentication mechanism has slight 
different
> > from Solaris9/8/7, in which platforms,
> > I setup and run pad at least 100 times.
> >
> > Techncial Sales
> > IBM Tivoli
> >
> > Mobile:  86-13910318103
> > Internet: jiantan at cn.ibm.com
> >
> >
> >
> >
> >              "Lane Silas"
> >
> >              <Silas.Lane at uk.fu
> >
> >              jitsu.com>
> > To
> >              Sent by:                  <users at netcoolusers.org>
> >
> >              users-bounces at net
> > cc
> >              coolusers.org
> >
> >
> > Subject
> >                                        Re: [INUG-Users] [NCO_PA] User
> >
> >              2008-01-09 21:20          'netcool' is unknown on this
> >
> >                                        system.Login Rejected.
> >
> >
> >
> >              Please respond to
> >
> >              users at netcooluser
> >
> >                    s.org
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > Try adding the user Netcool to the Solaris Group ncoadmin
> >
> >
> >
> > -----Original Message-----
> > From: users-bounces at netcoolusers.org
> > [mailto:users-bounces at netcoolusers.org] On Behalf Of Jian TJ Tan
> > Sent: 09 January 2008 12:00
> > To: users at netcoolusers.org
> > Subject: [INUG-Users] [NCO_PA] User 'netcool' is unknown on this
> > system.Login Rejected.
> >
> >
> > Hi,
> >
> > I know someone  has encountered such problem.
> >
> >  I have run the nco_pad command as non-root user on Solaris 10 
machine,
> > it
> >  worked fine. But when trying the command 'nco_pa_status', it didn't
> > work.
> >  The error that encountered is
> >
> >  $=>./nco_pa_status -user netcool
> >  Login Password:
> >  Sep 12 07:38:01 2007: Error: Failed to make a connection to NCO_PA.
> >
> >  In the log file i could see,
> >  Sep 12 07:36:48 2007: Error: User 'netcool' is unknown on this 
system.
> >  Login Rejected.
> >
> > My Omnibus is v7.1.
> >
> > I believe there should be some tricky here, possibably it is Operating
> > System problem.
> >
> > any hints are appreciated.
> >
> >
> >
> > Techncial Sales
> > IBM Tivoli
> >
> > Mobile:  86-13910318103
> > Internet: jiantan at cn.ibm.com
> > _______________________________________________
> > Sent by the netcoolusers.org "users" mailing list
> > Post: users at netcoolusers.org
> > Unsubscribe: users-unsubscribe at netcoolusers.org
> > Search: http://lists.netcoolusers.org/archives/users/
> >
> > _______________________________________________
> > Sent by the netcoolusers.org "users" mailing list
> > Post: users at netcoolusers.org
> > Unsubscribe: users-unsubscribe at netcoolusers.org
> > Search: http://lists.netcoolusers.org/archives/users/
> >
> > This message contains information that may be privileged or 
> > confidential and is the property of the Capgemini Group. It is 
> > intended only for the person to whom it is addressed. If you are not 
> >  the intended recipient,  you are not authorized to read, print, 
> > retain, copy, disseminate,  distribute, or use this message or any 
> > part thereof. If you receive this  message in error, please notify 
> > the sender immediately and delete all  copies of this message.
> >
> >
> > _______________________________________________
> > Sent by the netcoolusers.org "users" mailing list
> > Post: users at netcoolusers.org
> > Unsubscribe: users-unsubscribe at netcoolusers.org
> > Search: http://lists.netcoolusers.org/archives/users/
> >
> 
> 
> 
> _______________________________________________
> Sent by the netcoolusers.org "users" mailing list
> Post: users at netcoolusers.org
> Unsubscribe: users-unsubscribe at netcoolusers.org
> Search: http://lists.netcoolusers.org/archives/users/






Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU