NIS and DMZ

[donC_1]

Could someone point me in the right direction on configuring NIS in an DMZ? I doing some reasearch on NIS and DMZ. Any white paper will do.

[Steven E. Protter]

I've never seen a white paper on that specific topic.

If you want to have an NIS server in a DMZ to manage authentication for servers in the DMZ, it will work.

If you want an NIS server on the inside of the DMZ to work, based on the documentation that will not work. The NIS server can not operate in that fashion.

An alternative that might allow you to service an internal network and the DMZ is an LDAP server.

SEP

[A. Clay Stephenson]

If you want to configure an NIS client inside a DMZ that uses NIS server(s) that are not in the DMZ that is really no different than configuring any NIS client that is in another subnet.

Modify /etc/rc.config.d/namesvrs

NIS_MASTER_SERVER=0
NIS_SLAVE_SERVER=0
NIS_CLIENT=1
NIS_DOMAIN="YOUR_DOMAIN_NAME"
YPBIND_OPTIONS="-ypsetme -s"
YPSET_ADDR="10.20.30.1" # IP Address of NIS server

/sbin/init.d/nis.client stop
/sbin/init.d/nis.client start