Using SAM to Convert to trusted System

[John Warminski]

After several years of happily using NIS, I need to convert to a tusted system .... from what I can tell from the docs .... SAM looks like the way to go ....

SAM however will not convert from NIS to a trusted system .... and I have not been succesful finding any appropriate docs for remvoing NIS

Does anyone know either ,

1.) What all I need to do to meet the dependencies.

I am assuming changes to
/etc/nsswitch
/etc/passwd - removing the "+"
/etc/group - ditto
/etc/namesvr - commenting out any reference to yp

OR

2.) links to docs to assist removing NIS

[Michael Tully]

You can't convert an NIS to trusted, you have to either go to NIS+ or LDAP. As far as converting away from NIS I am not sure, but I will have a poke around.

[John Warminski]

Converting away form NIS for the time being.

Have to meet new security guidelines for password aging and history check by end of the week, don't think I have time to test and roll out NIS+

[Sridhar Bhaskarla · Accepted solution]

Hi,

Removing NIS shouldn't be a problem.

Stop NIS services by running the commands '/sbin/init.d/nis.client stop'. Make sure you halt all other clients using this as NIS server. Then run '/sbin/init.d/nis.server stop'.

Restore back your passwd, group, hosts, services etc, to standalone configurations.

Edit /etc/rc.config.d/namesvrs and remove NIS_DOMAIN domain and make NIS_SERVEr and NIS_CLIENT as 0. This will keep the system becoming an NIS cllient/server after reboots.

Also, consider /etc/default/security file as it has few more options in addition to what you get from trusted systems. Password history is enabled through this file.

-Sri

[Steven E. Protter]

Once you give up NIS the SAM conversion is trivial.

I'd day reverse the steps in this doc to handle the NIS issue.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B1031-90053/B1031-90053_top.html&con=/hpux/onlinedocs/B1031-90053/00/00/27-con.html&toc=/hpux/onlinedocs/B1031-90053/00/00/27-toc.html&searchterms=NIS%7cremoving&queryid=20040906-184047

SEP

[Cheryl Griffin]

Use the "Configure & Administer NIS" guide, backwards to unconfigure.

http://docs.hp.com/hpux/onlinedocs/B1031-90054/00/00/27-con.html

Sam is the (supported) way to go to configure or unconfigure a Trusted system.

[John Warminski]

Thanks for the validation... wish me luck