User Tools

Site Tools


сервис_nis

This is an old revision of the document!


Сервис NIS

Настройка Unix сервера

Инсталляция, инициализация БД и запуск

Debian/Ubuntu

root@server:~# apt install nis
...
Nis domain: corpX.un
...
root@server:~# cat /etc/defaultdomain
corpX.un
root@server:~# cat /etc/default/nis
...
NISSERVER=master
...
NISCLIENT=false
...
debian10# cat /etc/default/rpcbind
OPTIONS="-w -r"
root@server:~# init 6

root@server:~# /usr/lib/yp/ypinit -m
...
        next host to add:  server.corpX.un
        next host to add:  ^D
...
root@server:~# service nis restart

FreeBSD

[server:~] # cat /etc/rc.conf
...
rpcbind_enable="YES"
nisdomainname="corpX.un"
nis_server_enable="YES"
nis_yppasswdd_enable="YES"
[server:~] # /etc/rc.d/rpcbind start

[server:~] # /etc/rc.d/nisdomain start
Setting NIS domain: corpX.un.

[server:~] # mkdir /var/yp/corpX.un

[server:~] # service ypserv start

[server:~] # awk -F: '($3>=1000) && ($3<65533)' /etc/master.passwd > /var/yp/master.passwd

[server:~] # cd /var/yp

[server:/var/yp] # ypinit -m corpX.un
Server Type: MASTER Domain: corpX.un
...
Do you want this procedure to quit on non-fatal errors? [y/n: n]
...
Can we destroy the existing /var/yp/corpX.un and its contents? [y/n: n]  y
...
        master server   :  server.corpX.un
        next host to add:  ^D
...
Is this correct?  [y/n: y]
...
[server:/var/yp] # cd

[server:~] # service yppasswdd start

CentOS/SL

Настройка Windows сервера

SFU AD Windows 2003

Устанавливаем NIS server из пакета SFU

Опции инсталяции:

Custom:
        Server for NIS

Identity Management for Unix AD Windows 2008

Start->Administrative Tools->Server Manager->Roles->Active Directory Domain Services->Add Role Services->Identity Management for Unix

Identity Management for Unix убрали из Windows 2016

Настраиваем unix атрибуты пользователей

Аналогично, для user2 !!!

guser1

gidNumber: 10001

user1

gidNumber: 10001
loginShell: /bin/bash
uidNumber: 10001
unixHomeDirectory: /home/user1

group1

gidNumber: 15001
memberUid: user2
memberUid: user1

Настройка клиента

Debian/Ubuntu

# apt install nis
...
NIS domain: corpX.un
...
# cat /etc/defaultdomain
corpX.un
debian11# cat /etc/yp.conf
...
domain corpX.un server server.corpX.un
debian11# systemctl enable ypbind

debian11# systemctl start ypbind

root@client1:~# ypcat passwd
client1:~# cat /etc/nsswitch.conf
...
passwd:         compat
group:          compat
shadow:         compat
...
root@client1:~# cat /etc/passwd
...
+
root@client1:~# cat /etc/shadow
...
+
root@client1:~# cat /etc/group
...
+
debian11# service nscd restart

FreeBSD

[client1:~] # cat /etc/rc.conf
rpcbind_enable="YES"
nisdomainname="corpX.un"
nis_client_enable="YES"
[client1:~] # /etc/rc.d/rpcbind start

[client1:~] # /etc/rc.d/nisdomain start
Setting NIS domain: corpX.un.

[client1:~] # /etc/rc.d/ypbind start

[client1:~] # ypcat passwd

[client1:~] # vipw

[client1:~] # cat /etc/master.passwd
...
+:::::::::
[client1:~] # cat /etc/group
...
+:::

Проверка

# id user1

# id user2

# getent passwd
сервис_nis.1633797812.txt.gz · Last modified: 2021/10/09 19:43 by val