差異處

這裏顯示兩個版本的差異處。

--- nis [2017/01/05 16:58] – 127.0.0.1
+++ nis [2017/01/12 21:11] (目前版本) – jz
@@ 行 12: / 行 12: @@
 nis_client_flags="-S csna,csna1"
 </code>
-domainname csna
-start service
+start yp service
 <code>
+domainname csna
 service ypserv start
-service yppasswdd start
 </code>
-make config
+init master
 <code>
 cp /etc/master.passwd /var/yp/master.passwd
 cp /etc/group /var/yp/group
 cd /var/yp
-vi master.passwd
+vi master.passwd # delete admin account
+vi group # delete admin group
 vi Makefile
 # comment out this line: NOPUSH = "True"
 make
-</code>
+ypinit -m
-init master
-<code>
-ypinit -m csna
-</code>
 <code>
 Server Type: MASTER Domain: csna
@@ 行 61: / 行 56: @@
 </code>
+start yp password daemon
+<code>
+service yppasswdd start
+</code>
 ===== client =====
+add to rc.conf
 <code>
+nisdomainname="csna"
+nis_client_enable="YES"
+nis_client_flags="nis_yppasswdd_flags="-t /etc/master.passwd" -S csna,csna1"
+</code>
+<code>
+domainname csna
 service ypbind start
+</code>
+==== allow nis account to login to client ====
+install mkhomedir pam
+<code>
+sudo pkg install pam_mkhomedir
+</code>
+add following to the session section of /etc/pam.d/system
+<code>
+session         required        /usr/local/lib/pam_mkhomedir.so
+</code>
+==== allow nis account to login to client ====
+''vipw'' and add following line
+<code>
++:*::::::::
+</code>
+''vi /etc/group'' and add following line
+<code>
++:*::
+</code>
+or edit ''/etc/nsswitch.conf''
+remove
+<code>
+group: compat
+group_compat: nis
+passwd: compat
+passwd_compat: nis
+</code>
+add
+<code>
+group: files nis
+passwd: files nis
 </code>
@@ 行 76: / 行 123: @@
 </code>
+**ref**
+[[http://mail.lsps.tp.edu.tw/~gsyan/freebsd2001/pam_ldap.html]]