NIS-Questions

[Lothar Mueller]

Hi there,
I'm actually investigating NIS for user-management.
Maybe anybody out there can answer me some questions regarding NIS
- With NIS user-managment is done in a central manner. Are there any tools with NIS with whom I'm able to lock certain users on selected NIS-Client systems?
- We want to use local Home-Directories with NIS. Are there any possibilities to create these (local) home-directories central on the NIS-Master. We don't want to use automounter.

Thanks for answering my questions

Lothar

[Bharat Katkar]

Hi,
See the link below, talks about configuring NIS client.
http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B1031-90043/B1031-90043_top.html&con=/hpux/onlinedocs/B1031-90043/00/00/20-con.html&toc=/hpux/onlinedocs/B1031-90043/00/00/20-toc.html&searchterms=NIS&queryid=20040810-032428

Hope that helps.
Regards,

[Lothar Mueller]

Thanks for the link,

this means to configure each NIS-Client individually for Users to Lock.
Are there any more central possibilities to administer Users to lock on NIS-Clients.

Lothar

[Stuart Urquhart]

You could use the NIS netgroup map.
Try something like adding the following entries to each of your hosts (substituting hostname for the real host name) :-
Add to /etc/passwd
+@hostname_locked_users:*:-2:-2:::
+@hostname_allowed_users::-2:-2:::
All the users in the hostname_locked_users netgroup now have locked passwords on the host.
In /etc/netgroup on the NIS master
hostname_locked_users would contain the users who are locked out of the host
e.g.
hostname_locked_users (,user1,) (,user2,)
And hostname_allowed_users would contain the users allowed on the host
It's then centrally controlled via the NIS netgroup map.

[Lothar Mueller]

HI Stuart,

thanks for your feedback.
Unfortunately, as I researched, is /etc/netgroup only valid for remote-logins like rsh, rlogin of NFS-Mounts.
On our systems we only use SSH for login,
so this one doesn't work.

Any ideas?

Best Regards

Lothar

[Kevin Wright]

Netgroups are read by NIS and NFS.

The format of a netgroup is (hostname,username,domainname)

You must set passwd to compat in /etc/nsswitch.conf to enable the feature in the /etc/passwd file.