User Tools

Site Tools


сервис_nis

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
сервис_nis [2019/07/02 12:56]
val [Debian/Ubuntu]
сервис_nis [2024/02/01 14:05] (current)
val [Debian/Ubuntu]
Line 5: Line 5:
 ===== Настройка Unix сервера ===== ===== Настройка Unix сервера =====
  
-!!!Для ​аутентификации формат карт NIS в FreeBSD ​и Linux не совместим+  * [[Управление учетными записями в Linux#Создание тестового набора учетных записей]]
  
-==== Инсталяция,​ инициализация БД и запуск ====+==== Инсталляция, инициализация БД и запуск ====
  
 === Debian/​Ubuntu === === Debian/​Ubuntu ===
   * [[https://​help.ubuntu.com/​community/​SettingUpNISHowTo|SettingUpNISHowTo]]   * [[https://​help.ubuntu.com/​community/​SettingUpNISHowTo|SettingUpNISHowTo]]
 +  * [[https://​www.server-world.info/​en/​note?​os=Debian_10&​p=nis&​f=1|Debian 10 Buster Configure NIS Server]]
 +  * [[https://​www.debian.org/​releases/​buster/​i386/​release-notes/​ch-information.ru.html#​rpcbind-defaults|Debian 10 Buster NIS server does not answer NIS client requests by default]]
   * В течении 5 минут ищет, пока, несуществующий NIS сервер   * В течении 5 минут ищет, пока, несуществующий NIS сервер
 <​code>​ <​code>​
Line 16: Line 18:
 </​code><​code>​ </​code><​code>​
 ... ...
-Nis domain: corpX+Nis domain: corpX.un
 ... ...
 </​code><​code>​ </​code><​code>​
 root@server:​~#​ cat /​etc/​defaultdomain root@server:​~#​ cat /​etc/​defaultdomain
 </​code><​code>​ </​code><​code>​
-corpX+corpX.un
 </​code><​code>​ </​code><​code>​
-root@server:​~# cat /​etc/​default/​nis+debian10_ubuntu20# cat /​etc/​default/​nis
 </​code><​code>​ </​code><​code>​
 ... ...
Line 31: Line 33:
 ... ...
 </​code><​code>​ </​code><​code>​
-root@server:​~# init 6+debian10/​11_ubuntu20#​ cat /​etc/​default/​rpcbind 
 +</​code><​code>​ 
 +OPTIONS="​-w -r" 
 +</​code><​code>​ 
 +debian10_ubuntu20# init 6 
 + 
 +debian11# systemctl enable ypserv 
 + 
 +debian11# systemctl start ypserv
  
 root@server:​~#​ /​usr/​lib/​yp/​ypinit -m root@server:​~#​ /​usr/​lib/​yp/​ypinit -m
Line 40: Line 50:
 ... ...
 </​code><​code>​ </​code><​code>​
-root@server:​~# service ​ypserv ​restart+debian10# service ​nis restart
 </​code>​ </​code>​
  
Line 49: Line 59:
 ... ...
 rpcbind_enable="​YES"​ rpcbind_enable="​YES"​
-nisdomainname="​corpX"​+nisdomainname="​corpX.un"
 nis_server_enable="​YES"​ nis_server_enable="​YES"​
 nis_yppasswdd_enable="​YES"​ nis_yppasswdd_enable="​YES"​
Line 56: Line 66:
  
 [server:~] # /​etc/​rc.d/​nisdomain start [server:~] # /​etc/​rc.d/​nisdomain start
-Setting NIS domain: corpX.+Setting NIS domain: corpX.un.
  
-[server:~] # mkdir /​var/​yp/​corpX+[server:~] # mkdir /​var/​yp/​corpX.un
  
 [server:~] # service ypserv start [server:~] # service ypserv start
Line 66: Line 76:
 [server:~] # cd /var/yp [server:~] # cd /var/yp
  
-[server:/​var/​yp] # ypinit -m corpX+[server:/​var/​yp] # ypinit -m corpX.un
 </​code><​code>​ </​code><​code>​
-Server Type: MASTER Domain: corpX+Server Type: MASTER Domain: corpX.un
 ... ...
 Do you want this procedure to quit on non-fatal errors? [y/n: n] Do you want this procedure to quit on non-fatal errors? [y/n: n]
 ... ...
-Can we destroy the existing /​var/​yp/​corpX and its contents? [y/n: n]  y+Can we destroy the existing /​var/​yp/​corpX.un and its contents? [y/n: n]  y
 ... ...
         master server ​  : ​ server.corpX.un         master server ​  : ​ server.corpX.un
Line 105: Line 115:
 </​code>​ </​code>​
  
-==== Identity Management for Unix AD Windows 2016 ====+==== Identity Management for Unix убрали из Windows 2016 ====
  
   * [[https://​blogs.technet.microsoft.com/​activedirectoryua/​2016/​02/​09/​identity-management-for-unix-idmu-is-deprecated-in-windows-server/​|Clarification regarding the status of Identity Management for Unix (IDMU) & NIS Server Role in Windows Server 2016 Technical Preview and beyond]]   * [[https://​blogs.technet.microsoft.com/​activedirectoryua/​2016/​02/​09/​identity-management-for-unix-idmu-is-deprecated-in-windows-server/​|Clarification regarding the status of Identity Management for Unix (IDMU) & NIS Server Role in Windows Server 2016 Technical Preview and beyond]]
   * [[https://​access.redhat.com/​articles/​2203991|FAQ:​ The removal of Identity Management for Unix (IDMU) in Active Directory and how it affects the authentication of RHEL clients]]   * [[https://​access.redhat.com/​articles/​2203991|FAQ:​ The removal of Identity Management for Unix (IDMU) in Active Directory and how it affects the authentication of RHEL clients]]
 +
 +  * Active Directory Users and Computers->​View->​Advanced Features ... Attribute Editor
 ==== Настраиваем unix атрибуты пользователей ==== ==== Настраиваем unix атрибуты пользователей ====
  
 +  * [[Хранение учетных записей UNIX в LDAP#​Пример назначения UNIX атрибутов в Microsoft AD]]
 +
 +Аналогично,​ для user2 !!!
  
 **guser1** **guser1**
Line 118: Line 133:
 **user1** **user1**
 <​code>​ <​code>​
-uidNumber: 10001 
 gidNumber: 10001 gidNumber: 10001
 +loginShell: /bin/bash
 +uidNumber: 10001
 unixHomeDirectory:​ /home/user1 unixHomeDirectory:​ /home/user1
-loginShell: /bin/sh 
 </​code>​ </​code>​
 **group1** **group1**
Line 136: Line 151:
 </​code><​code>​ </​code><​code>​
 ... ...
-NIS domain: corpX+NIS domain: corpX.un
 ... ...
 </​code><​code>​ </​code><​code>​
 # cat /​etc/​defaultdomain # cat /​etc/​defaultdomain
 </​code><​code>​ </​code><​code>​
-corpX+corpX.un
 </​code><​code>​ </​code><​code>​
 +debian11# cat /​etc/​yp.conf
 +</​code><​code>​
 +...
 +domain corpX.un server 192.168.X.10
 +</​code><​code>​
 +debian11# systemctl enable ypbind
 +
 +debian11# systemctl start ypbind
 +
 root@client1:​~#​ ypcat passwd root@client1:​~#​ ypcat passwd
 +</​code>​
 +
 +  * [[Использование библиотеки NSSWITCH]]
 +
 +<​code>​
 +client1:~# cat /​etc/​nsswitch.conf
 +</​code><​code>​
 +...
 +passwd: ​        ​compat
 +group: ​         compat
 +shadow: ​        ​compat
 +...
 </​code><​code>​ </​code><​code>​
 root@client1:​~#​ cat /etc/passwd root@client1:​~#​ cat /etc/passwd
Line 159: Line 195:
 ... ...
 + +
 +</​code><​code>​
 +debian11# service nscd restart && service nscd reload
 </​code>​ </​code>​
- 
 ==== FreeBSD ==== ==== FreeBSD ====
 <​code>​ <​code>​
Line 166: Line 203:
 </​code><​code>​ </​code><​code>​
 rpcbind_enable="​YES"​ rpcbind_enable="​YES"​
-nisdomainname="​corpX"​+nisdomainname="​corpX.un"
 nis_client_enable="​YES"​ nis_client_enable="​YES"​
 </​code><​code>​ </​code><​code>​
Line 172: Line 209:
  
 [client1:~] # /​etc/​rc.d/​nisdomain start [client1:~] # /​etc/​rc.d/​nisdomain start
-Setting NIS domain: corpX.+Setting NIS domain: corpX.un.
  
 [client1:~] # /​etc/​rc.d/​ypbind start [client1:~] # /​etc/​rc.d/​ypbind start
сервис_nis.1562061380.txt.gz · Last modified: 2019/07/02 12:56 by val