標(biāo)題: NIS服務(wù) [打印本頁(yè)] 作者: lysdos 時(shí)間: 2007-09-17 10:30 標(biāo)題: NIS服務(wù) 1.NIS介紹:NIS(網(wǎng)絡(luò)信息服務(wù))也稱YP(Yellow Pages)協(xié)議,是一個(gè)提供目錄服務(wù)的RPC(遠(yuǎn)程過程調(diào)用)應(yīng)用服務(wù)。通過它,就可以在網(wǎng)絡(luò)上共享一個(gè)集中式的口令文件,從而大大簡(jiǎn)化客戶端用戶對(duì)帳戶和口令的維護(hù)工作。yp-tools/ypbind,ypserv三個(gè)軟件包,用來(lái)安裝NIS服務(wù)器,安裝linux時(shí)可以選擇安裝
2.NIS在linux服務(wù)器上的安裝實(shí)施:
Server:Redhat AS 4u5
name:ypserv.king.com
IP:192.168.1.152
a.在ypserv.king.com 安裝 ypserv(YP server),yp-tools,ypbind.修改/etc/rc.local 在最后添加 nisdomainname ypserv( ypserv 是這個(gè)nis的域名)
b.修改/etc/sysconfig/network文件加入 NISDOMAIN=ypserv (本機(jī)申告nis域名).reboot機(jī)器,使nisdomain生效.
c.編輯/var/yp/Makefile文件,可以保持變,默認(rèn)shadow支持開啟
d.啟動(dòng)ypserv 服務(wù):
server ypserv start YP服務(wù)的主程序
server yppasswdd start YP服務(wù)passwd 命令守護(hù)進(jìn)程(可以才客戶段改變密碼)
e.生成YP數(shù)據(jù)庫(kù)
/usr/lib/yp/ypinit -m
At this point, we have to construct a list of the hosts which will run NIS
servers. ypserv.king.com is in the list of NIS server hosts. Please continue to add
the names for the other hosts, one per line. When you are done with the
list, type a .
next host to add: ypserv.king.com
next host to add:
注意一下在這里將要生成yp數(shù)據(jù)庫(kù),在yp的makefile里定義的uid 號(hào)為 500 以后的用戶。所以說yp數(shù)據(jù)庫(kù)里的用戶必須是在server上添加完成的用戶,這樣才可以以后使用(也可以添加完成用戶后再次進(jìn)行).
在生成過程中,可能出現(xiàn)2次的報(bào)錯(cuò) 解決方法:touch /etc/aliases ,touch /etc/mail/aliases 可以解決
f.改變ypserv ,yppasswdd ,portmap 的啟動(dòng),chkconfig --level 345 ypserv on chkconfig --level 345 yppasswdd on chkconfig --level 345 portmap on
3.NIS在linux client的設(shè)置
Server:Redhat AS 4U5
name:ypclient.king.com
IP:192.168.1.153
a.在ypclient.king.com 安裝 ypserv(YP server),yp-tools,ypbind.修改/etc/rc.local 在最后添加 nisdomainname ypserv( ypserv 是這個(gè)nis的域名
b.修改/etc/hosts文件添加
192.168.1.152 ypserv.king.com
192.168.1.153 ypclient.king.com
c.啟動(dòng)ypbind :server ypbind start ,server portmap start :chkconfig --level 345 ypbind on ,chkconfig --level 345 portmap on
d.連接ypserv:redhat 里面提供一個(gè) authconfig 進(jìn)行配置
authconfig 4.6.10 - (c) 1999-2005 Red Hat, Inc.
aaaaaaaaaaaaaaaaaaa Authentication Configuration aaaaaaaaaaaaaaaaaa
a User Information Authentication a
a [ ] Cache Information
Use MD5 Passwords a
a [ ] Use Hesiod
Use Shadow Passwords a
a [ ] Use LDAP [ ] Use LDAP Authentication a
a
Use NIS [ ] Use Kerberos a
a [ ] Use Winbind [ ] Use SMB Authentication a
a [ ] Use Winbind Authentication a
a [ ] Local authorization is sufficient a
a a
a a Cancel a a Next a a
a aaaaaaaaaa aaaaaaaa a
a a
a a
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
/ between elements | selects | next screen
e連接完成后就可以進(jìn)行相關(guān)的測(cè)試了