------NIS+ Gurus, Please Help------

------NIS+ Gurus, Please Help------

Post by solar.. » Fri, 14 Apr 2000 04:00:00



Hi All,

I am an NIS+ greenhand with some background of NT domain, anyone would
kindly answer the following two questions? Thanks in advance.

1. User Mike has successfully used "nisclient -u" to add his account
"mike" on wks "babbage" to an NIS+ domain "hpc.com.". After that, will
the "mike" account be valid on every NIS+ client machines of the
domain? Or I should ask, giving that a wks "pascal" originally has
no "mike" entry in its /etc/password file, can Mike use the "mike"
account to login onto "pascal"?

Similiar questions are:
Is the account "mike" valid at domain level or at wks level?
Is the account "mike"'s fully qualified name "mike.hpc.com." or
"mike.babbage.hpc.com."?
What is the difference between NT domain and NIS+ domain?

2. Manual books from Sun are not sophisticated enough, so where on
Internet to find in depth information on NIS+?

Sent via Deja.com http://www.deja.com/
Before you buy.

 
 
 

------NIS+ Gurus, Please Help------

Post by Neil W Ricker » Fri, 14 Apr 2000 04:00:00



>I am an NIS+ greenhand with some background of NT domain, anyone would
>kindly answer the following two questions? Thanks in advance.
>1. User Mike has successfully used "nisclient -u" to add his account
>"mike" on wks "babbage" to an NIS+ domain "hpc.com.".

It sounds like lax security, that he is able to do that.

Quote:>                                                      After that, will
>the "mike" account be valid on every NIS+ client machines of the
>domain?

Most of our users have accounts only in NIS+.  This works on all
machines in same the NIS+ domain (unless you take steps to limit
it).  It might require also adding auto_home entries if you want
the home directory mountable everywhere.

Quote:>        Or I should ask, giving that a wks "pascal" originally has
>no "mike" entry in its /etc/password file, can Mike use the "mike"
>account to login onto "pascal"?

I don't even have an entry for myself in '/etc/passwd'.  However, I
do have an entry for an alternative account in case nis+ is broken
and I need emergency administrative access.

Quote:>Similiar questions are:
>Is the account "mike" valid at domain level or at wks level?
>Is the account "mike"'s fully qualified name "mike.hpc.com." or
>"mike.babbage.hpc.com."?

If it is "mike.babbage.hpc.com." then I take back everything I have
said above.  For in that case, he has set up an additional nis+
domain and is only in that.

Quote:>2. Manual books from Sun are not sophisticated enough, so where on
>Internet to find in depth information on NIS+?

I found what I know from the man pages and the answer book.
There is (or was) a NIS+ web page:

        "http://www.eng.auburn.edu/users/rayh/solaris/NIS+_FAQ.html"