[x]
Posted via EE Mobile

Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question
[x]
Attachment Details

how to slave nis to active directory

Asked by cmourn in Active Directory, Unix Networking, Miscellaneous Networking

Tags: nis, active directory, linux networking, unix networking

hello.  i work in a mixed environment of sun solaris sparc unix, redhat linux and windows 2k3/2k8 servers all in one domain.  the unix and linux servers use nis that is running on a unix box.  all windows servers and clients use active directory.  the unix server serving nis is very old and due for retirement.  i hope to retire it by thanksgiving.  with that said, i need help turning all the linux/unix servers from nis to active directory for authentication and other security services and functions. i don't know if i can slave nis to ad, or just do away with it and have active directory serve all servers.  i have a pdc and a bdc.  on the pdc (i have not installed this on the bdc), i have already installed microsoft identity management for unix.  it provides the following services:  Server For NIS and Password Synchronization.

Under Password Synchronization, it has UNIX Computers... which has my Unix Server listed with port 6677, and Sync Direction is "Windows to UNIX".  It also has an Encryption/Decryption Key.

Ok, the next one is Server For NIS.  Under that, it has "domain" and "domain.com"

Under "domain", there is NIS Servers, which lists both the Windows PDC and the UNIX NIS server.  And there is also NIS Maps, which lists:

aliases
passwd
group
services
netid
ethers
rpc
netgroup
bootparams
networks
netmasks
hosts
protocols
shadow

under "domain.com", i also have NIS Servers, but it only lists the Windows PDC.  Under NIS Maps, it only has this:

netid
passwd


Ok, so where do i go from here?

Also, I have a new RedHat Linux Enterprise Server I can use for NIS if necessary.  Please Advise.  Thanks!

Oh, one more thing, is SFU (Services For Unix) the same as MS Identity Management for Unix?  Or is this something I need to install also...?

Basically, we want servers in each NIS domain managed centrally through Active Directory, with access to a server now linked to a single Active Directory user account.
[+][-]11/03/09 09:01 AM, ID: 25731016Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]11/03/09 11:35 AM, ID: 25732609Author Comment

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20091118-EE-VQP-93 - Hierarchy / EE_QW_3_20080625