Differences

This shows you the differences between two versions of the page.

--- сервис_nis [2017/07/24 09:42]
val [Ubuntu]
+++ сервис_nis [2021/10/09 19:43]
val [Debian/Ubuntu]
@@ Line 1: / Line 1: @@
 ====== Сервис NIS ======
-===== Настройка Unix сервера =====
+  * [[https://www.ibm.com/support/knowledgecenter/en/ssw_aix_72/com.ibm.aix.nis/nis_domain.htm|NIS Domain]]
-!!!Для аутентификации формат карт NIS в FreeBSD и Linux не совместим
+===== Настройка Unix сервера =====
-==== Инсталяция, инициализация БД и запуск ====
+==== Инсталляция, инициализация БД и запуск ====
-=== Ubuntu/Debian ===
+=== Debian/Ubuntu ===
-  * https://help.ubuntu.com/community/SettingUpNISHowTo
+  * [[https://help.ubuntu.com/community/SettingUpNISHowTo|SettingUpNISHowTo]]
+  * [[https://www.server-world.info/en/note?os=Debian_10&p=nis&f=1|Debian 10 Buster Configure NIS Server]]
+  * [[https://www.debian.org/releases/buster/i386/release-notes/ch-information.ru.html#rpcbind-defaults|Debian 10 Buster NIS server does not answer NIS client requests by default]]
   * В течении 5 минут ищет, пока, несуществующий NIS сервер
 <code>
@@ Line 14: / Line 16: @@
 </code><code>
 ...
-Nis domain: corpX
+Nis domain: corpX.un
 ...
 </code><code>
 root@server:~# cat /etc/defaultdomain
 </code><code>
-corpX
+corpX.un
 </code><code>
 root@server:~# cat /etc/default/nis
@@ Line 28: / Line 30: @@
 NISCLIENT=false
 ...
+</code><code>
+debian10# cat /etc/default/rpcbind
+</code><code>
+OPTIONS="-w -r"
 </code><code>
 root@server:~# init 6
@@ Line 38: / Line 44: @@
 ...
 </code><code>
-root@server:~# service ypserv restart
+root@server:~# service nis restart
 </code>
@@ Line 47: / Line 53: @@
 ...
 rpcbind_enable="YES"
-nisdomainname="corpX"
+nisdomainname="corpX.un"
 nis_server_enable="YES"
 nis_yppasswdd_enable="YES"
@@ Line 54: / Line 60: @@
 [server:~] # /etc/rc.d/nisdomain start
-Setting NIS domain: corpX.
+Setting NIS domain: corpX.un.
-[server:~] # mkdir /var/yp/corpX
+[server:~] # mkdir /var/yp/corpX.un
 [server:~] # service ypserv start
@@ Line 64: / Line 70: @@
 [server:~] # cd /var/yp
-[server:/var/yp] # ypinit -m corpX
+[server:/var/yp] # ypinit -m corpX.un
 </code><code>
-Server Type: MASTER Domain: corpX
+Server Type: MASTER Domain: corpX.un
 ...
 Do you want this procedure to quit on non-fatal errors? [y/n: n]
 ...
-Can we destroy the existing /var/yp/corpX and its contents? [y/n: n]  y
+Can we destroy the existing /var/yp/corpX.un and its contents? [y/n: n]  y
 ...
         master server   :  server.corpX.un
@@ Line 103: / Line 109: @@
 </code>
+==== Identity Management for Unix убрали из Windows 2016 ====
+  * [[https://blogs.technet.microsoft.com/activedirectoryua/2016/02/09/identity-management-for-unix-idmu-is-deprecated-in-windows-server/|Clarification regarding the status of Identity Management for Unix (IDMU) & NIS Server Role in Windows Server 2016 Technical Preview and beyond]]
+  * [[https://access.redhat.com/articles/2203991|FAQ: The removal of Identity Management for Unix (IDMU) in Active Directory and how it affects the authentication of RHEL clients]]
+  * Active Directory Users and Computers->View->Advanced Features ... Attribute Editor
 ==== Настраиваем unix атрибуты пользователей ====
-Добавляем группу "guser1"
+  * [[Хранение учетных записей UNIX в LDAP#Пример назначения UNIX атрибутов в Microsoft AD]]
-Устанавливаем ее UNIX свойство
+Аналогично, для user2 !!!
+**guser1**
 <code>
-gid: 10001
+gidNumber: 10001
 </code>
+**user1**
-Добавляем UNIX атрибуты пользователю "user1"
 <code>
-uid: 10001
+gidNumber: 10001
-группа по умолчанию: guser1
+loginShell: /bin/bash
-home dir: /home/user1
+uidNumber: 10001
+unixHomeDirectory: /home/user1
+</code>
+**group1**
+<code>
+gidNumber: 15001
+memberUid: user2
+memberUid: user1
 </code>
 ===== Настройка клиента =====
-==== Ubuntu ====
+==== Debian/Ubuntu ====
 <code>
-root@client1:~# apt install nis
+# apt install nis
 </code><code>
 ...
-NIS domain: corpX
+NIS domain: corpX.un
 ...
 </code><code>
 # cat /etc/defaultdomain
 </code><code>
-corpX
+corpX.un
 </code><code>
+debian11# cat /etc/yp.conf
+</code><code>
+...
+domain corpX.un server server.corpX.un
+</code><code>
+debian11# systemctl enable ypbind
+debian11# systemctl start ypbind
 root@client1:~# ypcat passwd
+</code><code>
+client1:~# cat /etc/nsswitch.conf
+</code><code>
+...
+passwd:         compat
+group:          compat
+shadow:         compat
+...
 </code><code>
 root@client1:~# cat /etc/passwd
@@ Line 149: / Line 185: @@
 ...
 +
+</code><code>
+debian11# service nscd restart
 </code>
 ==== FreeBSD ====
 <code>
@@ Line 156: / Line 193: @@
 </code><code>
 rpcbind_enable="YES"
-nisdomainname="corpX"
+nisdomainname="corpX.un"
 nis_client_enable="YES"
 </code><code>
@@ Line 162: / Line 199: @@
 [client1:~] # /etc/rc.d/nisdomain start
-Setting NIS domain: corpX.
+Setting NIS domain: corpX.un.
 [client1:~] # /etc/rc.d/ypbind start

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools