*BSD News Article 60121


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.bhp.com.au!mel.dit.csiro.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.uoknor.edu!news.nodak.edu!plains.nodak.edu!not-for-mail
From: tinguely@plains.nodak.edu (Mark Tinguely)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: How to setup NIS server?
Date: 25 Jan 1996 17:47:55 -0600
Organization: North Dakota State University
Lines: 44
Message-ID: <4e94rb$ik4@plains.nodak.edu>
References: <4dkk5s$235@news.ust.hk>
NNTP-Posting-Host: plains.nodak.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

In article <4dkk5s$235@news.ust.hk> eg_lcx@uxmail.ust.hk (Water Dargon) writes:
>As Title.

in /etc/sysconfig change the following lines to:

# Set to the NIS domainname of your host, or NO if none
defaultdomainname=YOUR_DOMAIN_NAME_HERE

# Set to appropriate flags if you want to start NIS for a server
nis_serverflags=""

# Set to appropriate flags for yppasswdd, if you wish to run it.
# Typical flags might be "-m /var/yp/master.passwd -s -f"
yppasswddflags="-m /var/yp/master.passwd -s -f"

or 

yppasswddflags="-m /etc/master.passwd -s -f"

depending on if you plan to use the system password file (/etc/master.passwd)
as the YP password file (second case above) or not (first case above).

if you are not using the system password file for the YP password file
and you want the users to change their passwords (a very reasonable thing
for them to do), you need to add a dummy account entry into /etc/master.passwd
that looks like:

USER::ID:GRP:::::HOME_DIR:/sbin/nologin

where:
USER is the account name
no password (very important because the yppasswd is screwy)!
ID is the user id (very important, leave this out and they get uid 0 after
		   changing their password, I think this is a security hole).
GID is the default group id, see ID.
leave the GEOS stuff alone, so the user can change YP version. if you
                   don't want them to be able to change it, set it.
HOME_DIR home directory (important see problem with ID).
/sbin/nologin keeps them from do anything on this host.

change directory to /var/yp, read and follow the instructions in the Makefile
after doing that you can reboot and have a NIS server.

--mark.