Solved

Major Solaris NIS Problems

Posted on 1997-03-24
4
400 Views
Last Modified: 2013-12-16
We have a bunch of Solaris 2.5.1 servers that
are experiencing major NIS problems.  We have installed
NSKIT 1.2 (with appropriate patches).  We have all OS patches installed.  We are having problems in these areas:
- Autmount is not working properly (same subnet, fast machines) - it timesout mounting a share
- Logging in takes a long time to authenticate (Pc and UNIX side) and sometime authenticates correct passwords incorrectly.
- PC users cannot use NIS to do hostname resolution using a winsock application.
- Ypbind loses its binding to the domain often.
Any ideas?
0
Comment
Question by:saintjoes
  • 3
4 Comments
 
LVL 2

Expert Comment

by:pxh
Comment Utility
I have a very similar config as you (a NIS master, running 2.5.1 and having the NISKIT installed). I do not have your problems. Let me know more details about your config, the above is too common.

Only answer now: for hostname resolution you usually use a DNS service. You can do it within your NIS domain also, but I have not herad that there is NIS for PC's...

Peter (pxh@mpe-garching.mpg.de)

0
 

Author Comment

by:saintjoes
Comment Utility
We have NIS setup to DNS forwarding.  The client PC's are
using NIS as thier host name resolution.  The only odd thing in our setup is a SunOS master (these 2.5.1 machines are actually slaves, but are being used as NIS servers).
We have duplicated this on *3* Solaris 2.5.1 machines!



0
 
LVL 2

Accepted Solution

by:
pxh earned 200 total points
Comment Utility
Again, there is no obvious problem. We also had here a SunOS
NIS master running successfully for quite a while. Now I have one master + one slave under Solaris 2.5(.1) + mixed (Solaris + SunOS) clients.

Hmm, it is difficult do help you, things have to be verified step by step. I hope I am not bothering you with trivialities, but just to make shure: did you activate the right /etc/nsswitch.conf file? I.e. did you copy nsswitch.nis to nsswitch.conf an all systems?

So some more questions: do you have automatic or static NIS server recognition? I.e. does ypbind run with -broadcast options? How did you install the clients? Did you run ypinit -c and did you then specify all master and slaves? I found that methode more stable then running dynamic binding (ypbind -broadcast).

Then you have to find for a given client (a slave might be regarded as a client) which is his master, use the ypwhich command on that machine. Try to isolate the problem, e.g. shut down all slaves and run with one master only.

To the slaves: did you add the crontab entries? Here an example from mine:

#
# run the ypxfr's to syncronize aldebaran (slave) with orion (master)
#
0 * * * * /usr/lib/netsvc/yp/ypxfr_1perhour
0 1 * * * /usr/lib/netsvc/yp/ypxfr_1perday
0 2,14 * * * /usr/lib/netsvc/yp/ypxfr_2perday

You might have to edit the ypxfr scripts to support the tables you need.

Then your automount problem: if you enter "ypcat auto.direct" do you get the correct listing? I had to add en entry to /var/yp/Makefile for the support of the auto.direct file. Also check in /etc/nsswitch.conf for the line "automount:  nis files" to be present.

Then the name resolution prob: look into /var/yp/Makefile (of your master) and make shure the the line "B=-b" is active. Does the name resolution work at all, i.e. does nslookup <address> work?

Last not least are the right daemons running? On the master (Solaris):
/usr/lib/netsvc/yp/ypserv -d
/usr/lib/netsvc/yp/ypbind
/usr/lib/netsvc/yp/ypxfrd
/usr/lib/netsvc/yp/rpc.yppasswdd -D

on the slave(s):
/usr/lib/netsvc/yp/ypserv -d
/usr/lib/netsvc/yp/ypbind

and on the clients:
/usr/lib/netsvc/yp/ypbind

Hope you get any idea from that,

Peter (pxh@mpe-garching.mpg.de)

0
 
LVL 2

Expert Comment

by:pxh
Comment Utility
I am confused...
you wrote in the comment to my answer:

"Another note: Clients wore fine if they use the SunOS machine as their nis master." and "But all clients are using the solaris machine as their master."

I conclude that you switched between master and slave server and found out that only the slave server give problems.

Question: does NIS work properly on the slave(s) itselve? Is there a difference between those slave(s)?

Again: I am not nervous about your master being a SunOS system. I had this situation here too for several years (also with previous Solaris versions).

What did you precisly do to "We have duplicated this on *3* Solaris 2.5.1 machines!"? "this" meaning the slave service.

How does your /etc/auto_master look like?


Peter (pxh@mpe-garching.mpg.de)

0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Attention: This article will no longer be maintained. If you have any questions, please feel free to mail me. jgh@FreeBSD.org Please see http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-update-server/ for the updated article. It is avail…
A metadevice consists of one or more devices (slices). It can be expanded by adding slices. Then, it can be grown to fill a larger space while the file system is in use. However, not all UNIX file systems (UFS) can be expanded this way. The conca…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now