How to setup nsswitch.conf

[Sudhakar J_1]

Hi,

Is any one have how to setup nsswitch.conf to lookup multiple nis domains for user and group. I made ypbind to bind to two domains and tried the following in nsswitch.conf but it is not working.

passwd: nis(domain=engg) nis(domain=sales)

Any help is appreciated

[Karthik S S]

Man .... I told you it is not possible ;-)

Well I wcan suggest you a workaround but not a solution. Make the entries in the /etc/nsswitch.conf as follows,

passwd: files

(Before doing this do a
cp /etc/nsswitch.conf /etc/nsswitch.conf.nis
cp /etc/nsswitch.conf /etc/nsswitch.files )

And add all the NIS users to the /etc/passwd file from both of the NIS Domains. Now define a if condition in the /etc/profile such that if a user that belongs to NIS domain1 ,logs in to the system it should do the follwoing,

configure ypbind such that it binds to NIS Domain1 and do a
cp /etc/nsswitch.conf.files /etc/nsswitch.conf

and at the end of /etc/profile add,

su - username

And ofcourse the user will be prompted for the password again.

Configure similarly for NIS Domain2 with in the if loop.

However this method has practical limitations for instance if multiple users try to login at a given point of time you might run into difficulties.

If it sounds stupid to you feel free to hit me on my face when I meet you on monday.

But, I am pretty sure our forums Gurus can give you a better solution ;-)

Enjoy the weekend

-Karthik S S

[Karthik S S]

No new replies to this post???

-Karthik S S

No points for this please.

[Sudhakar J_1]

I was able to bind to two domains and i used a common user in nis and then thru profile script it would ask which domain user want to login and based on that defaultdomain user will be able to login, again in this also user needs to supply user name and password twice.

What i want is since nsswitch.conf has machanism to switch from say hosts from files to nis then to dns using notfound=continue keywords, is there any way to specy multiplr nis entries so that if a user is not part on domain (notfound) then process should switch to the next avialable nis domain(continue)

Any help is appreciated

[Steven E. Protter]

I attaching a pretty standard setup.

It would not take much effort to integrate NIS into it.

SEP

[Karthik S S]

SEP,

But I can't see the script.

Thanks,
Karthik S S