Bug#560333: libc6: getpwnam shows shadow passwords of NIS users

[Aurelien Jarno <aurelien@aurel32.net>]

Christoph Pleger a écrit :
> Hello,
> 
> the problem is somehow caused by nscd. When I disable passwd caching
> in /etc/nscd.conf and then restart nscd, the shadow passwords can only
> be seen by root.
> 

Unfortunately I don't have a NIS setup to debug that. Can you try with
libc6 / nscd from testing or unstable on a machine or even in a chroot?

If it is fixed in newer versions, we will try to find the commit fixing
this and then backport the fix. If it is not, I'll have to create a NIS
setup to debug it ;(

-- 
Aurelien Jarno                          GPG: 1024D/F1BCDB73
aurelien@aurel32.net                 http://www.aurel32.net