Test environment:
| NIS-master-server |
192.168.10.11 |
master |
| NIS-salver-server |
192.168.10.12 |
slave |
| NIS-client |
192.168.10.13 |
client |
systemctl stop NetworkManager
systemctl disable NetworkManager
systemctl stop firewalld
systemctl disable firewalld
setenforce 0
sed -i '/^SELINUX=/cSELINUX=disabled' /etc/selinux/config
master:
hostnamectl set-hostname master
hostname master
bash
# 添加域名解析记录
vi /etc/hosts
192.168.10.11 master
192.168.10.12 slave
192.168.10.13 client
yum install -y ypserv rpcbind yp-tools ypbind
# 临时设置
nisdomainname test
# 永久设置
echo "nisdomainname test" >> /etc/rc.d/rc.local
echo -e 'NISDOMAINNAME=test\nYPSERV_ARGS="-p 1011"' >> /etc/sysconfig/network
vi /etc/ypserv.conf
dns:no
files: 30
xfr_check_port: yes
127.0.0.0/255.255.255.0 : * : * : none
192.168.10.0/255.255.255.0 : * : * : none
* : * : * : deny
注意：255.255.255.0不能用24代替
vi /etc/sysconfig/yppasswdd
YPPASSWDD_ARGS="-p 1012"
# 启动服务，设置开机启动
systemctl start ypserv
systemctl enable ypserv
systemctl start rpcbind
systemctl enable rpcbind
systemctl start yppasswdd
systemctl enable yppasswdd
rpcinfo -p localhost
rpcinfo -u localhost ypserv
# 创建用户,指定家目录
mkdir /home/guest
for i in `seq 1 5`;do echo "---create nisuser$i---";useradd -d /home/guest/nisuser$i -u 100$i nisuser$i;echo nis | passwd --stdin nisuser$i;done
/usr/lib64/yp/ypinit -m
make -C /var/yp
ls /var/yp/test/
sed -i "/^NOPUSH=/cNOPUSH=false" /var/yp/Makefile
echo "slave" >> /var/yp/ypservers
systemctl start ypxfrd
systemctl enable ypxfrd
#测试
ypcat -h localhost passwd.byname
#NFS挂载
yum install -y nfs-utils
vim /etc/exports
/home/guest slave(sync,rw,no_root_squash)
systemctl start nfs
systemctl enable nfs
showmount -e
slave:
hostnamectl set-hostname slave
hostname slave
bash
# 添加域名解析记录
vi /etc/hosts
192.168.10.11 master
192.168.10.12 slave
192.168.10.13 client
yum install -y ypserv rpcbind yp-tools ypbind
# 临时设置
nisdomainname test
# 永久设置
echo "nisdomainname test" >> /etc/rc.d/rc.local
echo -e 'NISDOMAINNAME=test\nYPSERV_ARGS="-p 1011"' >> /etc/sysconfig/network
vi /etc/ypserv.conf
files: 30
xfr_check_port: yes
127.0.0.0/255.255.255.0 : * : * : none
192.168.10.0/255.255.255.0 : * : * : none
* : * : * : deny
注意：255.255.255.0不能用24代替
vi /etc/sysconfig/yppasswdd
YPPASSWDD_ARGS="-p 1012"
systemctl start ypserv
systemctl start rpcbind
systemctl start yppasswdd
systemctl enable ypserv
systemctl enable rpcbind
systemctl enable yppasswdd
# 挂载
yum install -y nfs-utils
showmount -e 192.168.10.11
mount.nfs 192.168.10.11:/home/guest /home
vim /etc/fstab
192.168.10.11:/home/guest /home nfs defaults 0 0
df -h
# 自动挂载
yum install -y autofs
echo "/home /etc/auto.home" >> /etc/auto.master
vim /etc/auto.home
* -rw 192.168.10.11:/home/guest/&
systemctl start autofs
systemctl enable autofs
/usr/lib64/yp/ypinit -s master
#测试
ypcat -h localhost passwd
client:
hostnamectl set-hostname client
hostname client
bash
# 添加域名解析记录
vi /etc/hosts
192.168.10.11 master
192.168.10.12 slave
192.168.10.13 client
yum install -y yp-tools ypbind
# 临时设置
nisdomainname test
# 永久设置
echo "nisdomainname test" >> /etc/rc.d/rc.local
echo -e 'NISDOMAINNAME=test\nYPSERV_ARGS="-p 1011"' >> /etc/sysconfig/network
vim /etc/nsswitch.conf
33 passwd: files nis sss
34 shadow: files nis sss
35 group: files nis sss
39 hosts: files nis dns
vim /etc/yp.conf
22 domainname test server master
23 domainname test server slave
24 ypserver master
25 ypserver slave
vim /etc/sysconfig/authconfig
19 USENIS=yes
vim /etc/pam.d/system-auth
16 password sufficient pam_unix.so sha512 nis shadow nullok try_first_pass use_authtok
authconfig-tui
systemctl start rpcbind
systemctl enable rpcbind
systemctl start ypbind
systemctl enable ypbind
#测试
yptest
ypwhich
ypwhich -x
ypcat -k passwd.byname
su - nisuser1
id
yppasswd
