*BSD News Article 49567


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!simtel!news.kei.com!sol.ctr.columbia.edu!startide.ctr.columbia.edu!wpaul
From: wpaul@ctr.columbia.edu (Bill Paul)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: NIS/YP
Date: 29 Aug 1995 01:15:08 GMT
Organization: Columbia University Center for Telecommunications Research
Lines: 54
Message-ID: <41tpms$3ic@sol.ctr.columbia.edu>
References: <41sc94$o74@buffnet2.buffnet.net>
NNTP-Posting-Host: startide.ctr.columbia.edu
X-Newsreader: TIN [version 1.2 PL2]

Daring to challenge the will of the almighty Leviam00se, Superuser
(root@buffnet.net) had the courage to say:

: I dont have a SUN or sun manuals - and I have a question about the YP 
: implementation in freebsd 2.0.5-release

: I can get a bind on the master from a client freebsd - I can ypcat the 
: various tables.

: My question - what do I do to get the freebsd system to use yp/nis for 
: logins?  Do I need to twiddle the /etc/passwd or master.passwd file in 
: some way?  I know I read something 100 years ago on how sun does it - 
: something to do with +'s on a line but Ill be dragged thru mud if I can 
: find the book I read it in.

: Any help is appreciated!

First of all, _I'm_ the one who gets to call himself 'Superuser'. (It's
my IRC nick, on those rare occasions when I use IRC.)

That said, the simplest way to turn on NIS for logins is:

1) Make damn sure you're using DES passwords. If your server is
   a Sun and you don't have the DES package installed, your FreeBSD
   system will be unable to decipher the passwords in the NIS passwd
   maps.

2) add a line that says +::::::::: (that's a plus sign and nine colons)
   to the end of /etc/master.passwd and then rebuild the password databases
   with pwd_mkdb. Best thing is just to use vipw to add the line; it'll
   remake the databases for you. DO NOT edit /etc/passwd. In FreeBSD,
   /etc/passwd is automatically generated from /etc/master.passwd.

3) Add a line to the end of /etc/group that says +::: (that's a plus
   sign and three colons).

That's it. So long as your domain name is set and ypbind is running,
NIS users should be able to login right away -- although you'll have to
arrange for their home directories to be available. NFS and the automounter
are good for this sort of thing.

I'm working on new manual pages for 2.1 that explain all this stuff
in better detail.

-Bill

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~T~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-Bill Paul            (212) 854-6020 | System Manager
Work:         wpaul@ctr.columbia.edu | Center for Telecommunications Research
Home:  wpaul@skynet.ctr.columbia.edu | Columbia University, New York City
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The Møøse Illuminati: ignore it and be confused, or join it and be confusing!
~~~~~~ "Welcome to All Things BSDish! If it's not BSDish, it's crap!" ~~~~~~~