admins attempted to update system's root password and private keys, not the public keys for the system. The public key was updated on the NIS+ master with the "nisclient -co" command. Once the public key is updated on the NIS+ master, encrypted communication immediately fails between the replicas and all the clients. Communication works fine from the replicas to the clients. Our solution was to get all the replicas and clients to realize the public key change, which was re-NIS-ing all the servers. That is a boat load of work. There may be another option, use/review at your own risk,
