Differences

This shows you the differences between two versions of the page.

--- сервис_nis [2019/01/25 10:42]
val [Identity Management for Unix AD Windows 2016]
+++ сервис_nis [2024/01/30 13:52]
val
@@ Line 5: / Line 5: @@
 ===== Настройка Unix сервера =====
-!!!Для аутентификации формат карт NIS в FreeBSD и Linux не совместим
+  * [[Управление учетными записями в Linux#Создание тестового набора учетных записей]]
-==== Инсталяция, инициализация БД и запуск ====
+==== Инсталляция, инициализация БД и запуск ====
-=== Ubuntu/Debian ===
+=== Debian/Ubuntu ===
-  * https://help.ubuntu.com/community/SettingUpNISHowTo
+  * [[https://help.ubuntu.com/community/SettingUpNISHowTo|SettingUpNISHowTo]]
+  * [[https://www.server-world.info/en/note?os=Debian_10&p=nis&f=1|Debian 10 Buster Configure NIS Server]]
+  * [[https://www.debian.org/releases/buster/i386/release-notes/ch-information.ru.html#rpcbind-defaults|Debian 10 Buster NIS server does not answer NIS client requests by default]]
   * В течении 5 минут ищет, пока, несуществующий NIS сервер
 <code>
@@ Line 16: / Line 18: @@
 </code><code>
 ...
-Nis domain: corpX
+Nis domain: corpX.un
 ...
 </code><code>
 root@server:~# cat /etc/defaultdomain
 </code><code>
-corpX
+corpX.un
 </code><code>
-root@server:~# cat /etc/default/nis
+debian10_ubuntu20# cat /etc/default/nis
 </code><code>
 ...
@@ Line 31: / Line 33: @@
 ...
 </code><code>
-ubuntu16# /bin/systemctl add-wants multi-user.target rpcbind.service
+debian10/11_ubuntu20# cat /etc/default/rpcbind
+</code><code>
+OPTIONS="-w -r"
+</code><code>
+debian10_ubuntu20# init 6
+debian11# systemctl enable ypserv
-root@server:~# init 6
+debian11# systemctl start ypserv
 root@server:~# /usr/lib/yp/ypinit -m
@@ Line 42: / Line 50: @@
 ...
 </code><code>
-root@server:~# service ypserv restart
+debian10# service nis restart
 </code>
@@ Line 51: / Line 59: @@
 ...
 rpcbind_enable="YES"
-nisdomainname="corpX"
+nisdomainname="corpX.un"
 nis_server_enable="YES"
 nis_yppasswdd_enable="YES"
@@ Line 58: / Line 66: @@
 [server:~] # /etc/rc.d/nisdomain start
-Setting NIS domain: corpX.
+Setting NIS domain: corpX.un.
-[server:~] # mkdir /var/yp/corpX
+[server:~] # mkdir /var/yp/corpX.un
 [server:~] # service ypserv start
@@ Line 68: / Line 76: @@
 [server:~] # cd /var/yp
-[server:/var/yp] # ypinit -m corpX
+[server:/var/yp] # ypinit -m corpX.un
 </code><code>
-Server Type: MASTER Domain: corpX
+Server Type: MASTER Domain: corpX.un
 ...
 Do you want this procedure to quit on non-fatal errors? [y/n: n]
 ...
-Can we destroy the existing /var/yp/corpX and its contents? [y/n: n]  y
+Can we destroy the existing /var/yp/corpX.un and its contents? [y/n: n]  y
 ...
         master server   :  server.corpX.un
@@ Line 107: / Line 115: @@
 </code>
-==== Identity Management for Unix AD Windows 2016 ====
+==== Identity Management for Unix убрали из Windows 2016 ====
   * [[https://blogs.technet.microsoft.com/activedirectoryua/2016/02/09/identity-management-for-unix-idmu-is-deprecated-in-windows-server/|Clarification regarding the status of Identity Management for Unix (IDMU) & NIS Server Role in Windows Server 2016 Technical Preview and beyond]]
   * [[https://access.redhat.com/articles/2203991|FAQ: The removal of Identity Management for Unix (IDMU) in Active Directory and how it affects the authentication of RHEL clients]]
+  * Active Directory Users and Computers->View->Advanced Features ... Attribute Editor
 ==== Настраиваем unix атрибуты пользователей ====
-Добавляем группу "guser1"
+  * [[Хранение учетных записей UNIX в LDAP#Пример назначения UNIX атрибутов в Microsoft AD]]
-Устанавливаем ее UNIX свойство
+Аналогично, для user2 !!!
+**guser1**
 <code>
-gid: 10001
+gidNumber: 10001
 </code>
+**user1**
-Добавляем UNIX атрибуты пользователю "user1"
 <code>
-uid: 10001
+gidNumber: 10001
-группа по умолчанию: guser1
+loginShell: /bin/bash
-home dir: /home/user1
+uidNumber: 10001
+unixHomeDirectory: /home/user1
+</code>
+**group1**
+<code>
+gidNumber: 15001
+memberUid: user2
+memberUid: user1
 </code>
 ===== Настройка клиента =====
@@ Line 134: / Line 151: @@
 </code><code>
 ...
-NIS domain: corpX
+NIS domain: corpX.un
 ...
 </code><code>
 # cat /etc/defaultdomain
 </code><code>
-corpX
+corpX.un
 </code><code>
-ubuntu16# /bin/systemctl add-wants multi-user.target rpcbind.service
+debian11# cat /etc/yp.conf
+</code><code>
+...
+domain corpX.un server server.corpX.un
+</code><code>
+debian11# systemctl enable ypbind
-ubuntu16# init 6
+debian11# systemctl start ypbind
 root@client1:~# ypcat passwd
+</code>
+  * [[Использование библиотеки NSSWITCH]]
+<code>
+client1:~# cat /etc/nsswitch.conf
+</code><code>
+...
+passwd:         compat
+group:          compat
+shadow:         compat
+...
 </code><code>
 root@client1:~# cat /etc/passwd
@@ Line 161: / Line 195: @@
 ...
 +
+</code><code>
+debian11# service nscd restart && service nscd reload
 </code>
 ==== FreeBSD ====
 <code>
@@ Line 168: / Line 203: @@
 </code><code>
 rpcbind_enable="YES"
-nisdomainname="corpX"
+nisdomainname="corpX.un"
 nis_client_enable="YES"
 </code><code>
@@ Line 174: / Line 209: @@
 [client1:~] # /etc/rc.d/nisdomain start
-Setting NIS domain: corpX.
+Setting NIS domain: corpX.un.
 [client1:~] # /etc/rc.d/ypbind start

Методические материалы Лохтурова Вячеслава

User Tools

Site Tools

Differences

Page Tools