Solved

Major Solaris NIS Problems

Posted on 1997-03-24
4
402 Views
Last Modified: 2013-12-16
We have a bunch of Solaris 2.5.1 servers that
are experiencing major NIS problems.  We have installed
NSKIT 1.2 (with appropriate patches).  We have all OS patches installed.  We are having problems in these areas:
- Autmount is not working properly (same subnet, fast machines) - it timesout mounting a share
- Logging in takes a long time to authenticate (Pc and UNIX side) and sometime authenticates correct passwords incorrectly.
- PC users cannot use NIS to do hostname resolution using a winsock application.
- Ypbind loses its binding to the domain often.
Any ideas?
0
Comment
Question by:saintjoes
  • 3
4 Comments
 
LVL 2

Expert Comment

by:pxh
ID: 1811951
I have a very similar config as you (a NIS master, running 2.5.1 and having the NISKIT installed). I do not have your problems. Let me know more details about your config, the above is too common.

Only answer now: for hostname resolution you usually use a DNS service. You can do it within your NIS domain also, but I have not herad that there is NIS for PC's...

Peter (pxh@mpe-garching.mpg.de)

0
 

Author Comment

by:saintjoes
ID: 1811952
We have NIS setup to DNS forwarding.  The client PC's are
using NIS as thier host name resolution.  The only odd thing in our setup is a SunOS master (these 2.5.1 machines are actually slaves, but are being used as NIS servers).
We have duplicated this on *3* Solaris 2.5.1 machines!



0
 
LVL 2

Accepted Solution

by:
pxh earned 200 total points
ID: 1811953
Again, there is no obvious problem. We also had here a SunOS
NIS master running successfully for quite a while. Now I have one master + one slave under Solaris 2.5(.1) + mixed (Solaris + SunOS) clients.

Hmm, it is difficult do help you, things have to be verified step by step. I hope I am not bothering you with trivialities, but just to make shure: did you activate the right /etc/nsswitch.conf file? I.e. did you copy nsswitch.nis to nsswitch.conf an all systems?

So some more questions: do you have automatic or static NIS server recognition? I.e. does ypbind run with -broadcast options? How did you install the clients? Did you run ypinit -c and did you then specify all master and slaves? I found that methode more stable then running dynamic binding (ypbind -broadcast).

Then you have to find for a given client (a slave might be regarded as a client) which is his master, use the ypwhich command on that machine. Try to isolate the problem, e.g. shut down all slaves and run with one master only.

To the slaves: did you add the crontab entries? Here an example from mine:

#
# run the ypxfr's to syncronize aldebaran (slave) with orion (master)
#
0 * * * * /usr/lib/netsvc/yp/ypxfr_1perhour
0 1 * * * /usr/lib/netsvc/yp/ypxfr_1perday
0 2,14 * * * /usr/lib/netsvc/yp/ypxfr_2perday

You might have to edit the ypxfr scripts to support the tables you need.

Then your automount problem: if you enter "ypcat auto.direct" do you get the correct listing? I had to add en entry to /var/yp/Makefile for the support of the auto.direct file. Also check in /etc/nsswitch.conf for the line "automount:  nis files" to be present.

Then the name resolution prob: look into /var/yp/Makefile (of your master) and make shure the the line "B=-b" is active. Does the name resolution work at all, i.e. does nslookup <address> work?

Last not least are the right daemons running? On the master (Solaris):
/usr/lib/netsvc/yp/ypserv -d
/usr/lib/netsvc/yp/ypbind
/usr/lib/netsvc/yp/ypxfrd
/usr/lib/netsvc/yp/rpc.yppasswdd -D

on the slave(s):
/usr/lib/netsvc/yp/ypserv -d
/usr/lib/netsvc/yp/ypbind

and on the clients:
/usr/lib/netsvc/yp/ypbind

Hope you get any idea from that,

Peter (pxh@mpe-garching.mpg.de)

0
 
LVL 2

Expert Comment

by:pxh
ID: 1811954
I am confused...
you wrote in the comment to my answer:

"Another note: Clients wore fine if they use the SunOS machine as their nis master." and "But all clients are using the solaris machine as their master."

I conclude that you switched between master and slave server and found out that only the slave server give problems.

Question: does NIS work properly on the slave(s) itselve? Is there a difference between those slave(s)?

Again: I am not nervous about your master being a SunOS system. I had this situation here too for several years (also with previous Solaris versions).

What did you precisly do to "We have duplicated this on *3* Solaris 2.5.1 machines!"? "this" meaning the slave service.

How does your /etc/auto_master look like?


Peter (pxh@mpe-garching.mpg.de)

0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
A metadevice consists of one or more devices (slices). It can be expanded by adding slices. Then, it can be grown to fill a larger space while the file system is in use. However, not all UNIX file systems (UFS) can be expanded this way. The conca…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now