rhel 5.3 nis 服务器搭建 详细（原创）
RHEL 5.3 NIS 服务搭建
#1.about NIS
NIS NIS （Network Information Service）网络信息服务，类似于windows AD.简单说就是客户端登陆验证全部都交给NIS服务器来处理。
在 NIS 环境中， 有三种类型的主机：
1.主服务器(master)
2.从服务器(slave)
3.客户机 (client)
#2工作原理
1.server开启后会用portmapper 分配端口给ypserv进程 和 yppasswd进程
2.client登陆验证时client的ypbind进程会去连接server的portmapper
3.server在指定一个port给client
4.client的ypbind用刚刚被指定的port号和ypserv来连线并作验证
5.client修改passwd时,client的yppasswd和server的yppasswd来沟通
#3.服务所需软件包
[root@ns ~]# rpm -qa yp*
yp-tools-2.9-0.1
ypbind-1.19-11.el5
ypserv-2.19-5.el5
#portmap不是NIS服务器的包，但NIS和必须依赖他
[root@ns ~]# rpm -qa portmap
portmap-4.0-65.2.2.1
#################################################################################################
#4.配置NIS服务器
#添加NIS域名
[root@ns ~]# nisdomainname jshlx-nis
[root@ns ~]# echo "NISDOMAIN=jshlx-nis" >> /etc/sysconfig/network
[root@ns ~]# /etc/init.d/ypserv start
Starting YP server services: [ OK ]
[root@ns ~]# /etc/init.d/yppasswdd start
Starting YP passwd service: [ OK ]
#修改为开机自启动服务
[root@ns ~]# chkconfig ypserv on
[root@ns ~]# chkconfig yppasswdd on
#添加一个普通账号，用于测试，如果有这步就不用了。
[root@ns ~]# useradd simp
[root@ns ~]# passwd simp
[root@ns ~]# /usr/lib/yp/ypinit -m
At this point, we have to construct a list of the hosts which will run NIS
servers. ns.simp.com is in the list of NIS server hosts. Please continue to add
the names for the other hosts, one per line. When you are done with the
list, type a <control D>.
next host to add: ns.simp.com
next host to add:
The current list of NIS servers looks like this:
ns.simp.com
Is this correct? [y/n: y] y
We need a few minutes to build the databases...
Building /var/yp/jshlx-nis/ypservers...
Running /var/yp/Makefile...
gmake[1]: Entering directory `/var/yp/jshlx-nis'
Updating passwd.byname...
Updating passwd.byuid...
Updating group.byname...
Updating group.bygid...
Updating hosts.byname...
Updating hosts.byaddr...
Updating rpc.byname...
Updating rpc.bynumber...
Updating services.byname...
Updating services.byservicename...
Updating netid.byname...
Updating protocols.bynumber...
Updating protocols.byname...
Updating mail.aliases...
gmake[1]: Leaving directory `/var/yp/jshlx-nis'
ns.simp.com has been set up as a NIS master server.
Now you can run ypinit -s ns.simp.com on all slave server.
#将NIS服务器主配置文件的最后一段的#号去了，意为允许所有的主机加入所有的域，安全问题我们稍后解答。
[root@ns ~]# tail -n 2 /etc/ypserv.conf
* : * : * : none
[root@ns ~]# vi /var/yp/Makefile
找到all: 这一行修改如下：设置共享的范围。
117 all: passwd group \
#############################################################################################
client 配置
authconfig-tui - (c) 1999-2005 Red Hat, Inc.
+----------------| Authentication Configuration +-----------------+
| |
| User Information Authentication |
| [ ] Cache Information [*] Use MD5 Passwords |
| [ ] Use Hesiod [*] Use Shadow Passwords |
| [ ] Use LDAP [ ] Use LDAP Authentication |
| [*] Use NIS [ ] Use Kerberos |
| [ ] Use Winbind [ ] Use SMB Authentication |
| [ ] Use Winbind Authentication |
| [ ] Local authorization is sufficient |
| |
| +--------+ +------+ |
| | Cancel | | Next | |
| +--------+ +------+ |
| |
| |
+-----------------------------------------------------------------+
<Tab>/<Alt-Tab> between elements | <Space> selects | <F12> next screen
authconfig-tui - (c) 1999-2005 Red Hat, Inc.
+-----------------| NIS Settings +-----------------+
| |
| Domain: jshlx-nis_______________________________ |
| Server: 192.168.5.3_____________________________ |
| |
| +------+ +----+ |
| | Back | | Ok | |
| +------+ +----+ |
| |
| |
+--------------------------------------------------+
<Tab>/<Alt-Tab> between elements | <Space> selects | <F12> next screen
Stopping portmap: [ OK ]
Starting portmap: [ OK ]
Shutting down NIS services: [ OK ]
Binding to the NIS domain: [ OK ]
Listening for an NIS domain server..
####################################################################################################
#这时候注销用之前新建的普通账号登录就会出现以下信息。
Last login: Fri Oct 9 17:43:30 2009
No directory /home/simp！
Logging in with home = "/".
-bash-3.2$
#上面已经登录成功，但是却提示没有家目录，只需要在server端开共享即可
[root@ns ~]# echo "/home 192.168.5.0/24(rw,sync)" >> /etc/exports
[root@ns ~]# exportfs -r
[root@ns ~]# showmount -e localhost
Export list for localhost:
/home 192.168.5.0/24
[root@ns ~]# /etc/init.d/nfs start
[root@ns ~]# chkconfig nfs on
#客户端挂载服务器端的/home到本地的/home
[root@ns ~]# mount.nfs 192.168.5.3:/home /home/
#客户端重新登录后，就不在有找不到家目录的提示了
Last login: Fri Oct 9 17:53:34 2009 from 192.168.0.19
[simp@ns ~]$
####################################################################################################
进阶设置
[root@ns ~]# mkdir /nis_home
[root@ns ~]# chmod 1777 /nis_home/
[root@ns ~]# useradd -Db /nis_home/
[root@ns ~]# useradd nis1
[root@ns ~]# passwd nis1
Changing password for user nis1.
New UNIX password:
BAD PASSWORD: it is too simplistic/systematic
Retype new UNIX password:
passwd: all authentication tokens updated successfully.
[root@ns ~]# useradd nis2
[root@ns ~]# passwd nis2
Changing password for user nis2.
New UNIX password:
BAD PASSWORD: it is too simplistic/systematic
Retype new UNIX password:
passwd: all authentication tokens updated successfully.
[root@ns ~]# echo "/nis_home/ 192.168.5.0/24(rw,sync)" >> /etc/exports
[root@ns ~]# exportfs -r
[root@ns ~]# showmount -e localhost Export list for localhost:
/nis_home 192.168.5.0/24
[/root]#echo "/nis_home /etc/auto.home --timeout=600" >> /etc/auto.master
[/root]#echo "* -rw,soft,intr 192.168.5.3:/nis_home/&" >> /etc/auto.home
[/etc]#/etc/init.d/autofs restart
[/etc]#su - nis1
[nis1@ns ~]$
[/etc]#mount
/dev/sda1 on / type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
none on /proc/fs/vmblock/mountPoint type vmblock (rw)
nfsd on /proc/fs/nfsd type nfsd (rw)
192.168.5.3:/nis_home/nis1 on /nis_home/nis1 type nfs (rw,soft,initr,addr=192.168.5.3)
[root@ns ~]# rpcinfo -p $hostname
program vers proto port
100000 2 tcp 111 portmapper
100000 2 udp 111 portmapper
100024 1 udp 675 status
100024 1 tcp 678 status
100004 2 udp 616 ypserv
100004 1 udp 616 ypserv
100004 2 tcp 619 ypserv
100004 1 tcp 619 ypserv
100009 1 udp 630 yppasswdd
100011 1 udp 695 rquotad
100011 2 udp 695 rquotad
100011 1 tcp 698 rquotad
100011 2 tcp 698 rquotad
100003 2 udp 2049 nfs
100003 3 udp 2049 nfs
100003 4 udp 2049 nfs
100021 1 udp 43122 nlockmgr
100021 3 udp 43122 nlockmgr
100021 4 udp 43122 nlockmgr
100003 2 tcp 2049 nfs
100003 3 tcp 2049 nfs
100003 4 tcp 2049 nfs
100021 1 tcp 52450 nlockmgr
100021 3 tcp 52450 nlockmgr
100021 4 tcp 52450 nlockmgr
100005 1 udp 709 mountd
100005 1 tcp 712 mountd
100005 2 udp 709 mountd
100005 2 tcp 712 mountd
100005 3 udp 709 mountd
100005 3 tcp 712 mountd