SUMMARY: NIS and C2

From: Larry Chin (larry@cch.com)
Date: Tue Jul 28 1992 - 14:42:18 CDT


Original Query:
---------------

I am trying to install C2 on our network of Sparc 2 machines running 4.1.2.
I have the C2 jumbo patch and everything goes okay until the /var/yp/make
tries to make and push the passwd.adjunct and group.adjunct files.
I then get the following error:

Can't bind master to send ypclear message to ypserv for map
passwd.adjunct.byname.

If I redo the make the message repeats but for the group.adjunct, so it seems
that the passwd.adjunct files are being made.

After getting the messages the whole process just hangs and I have to Ctlr-C to
kill it.

Does anyone have any ideas what is going on here ? I would really appreciate
any insights.

Solution:
----------

I got two answers to this query both of them right on.
Thanks to:

Richard Elling <Richard.Elling@eng.auburn.edu>
Dan Transue <odt@dcs.bellcore.com>

When installing C2 in conjunction with NIS there are two new NIS maps produced
by C2, passwd.adjunct and group.adjunct. When the make in /var/yp is invoked and
tries to push these two maps the push fails since NIS will not push maps to
a slave server that do not already exist on the slave.

The solution therefore is to create these files by "touch filename" or
re-initalize the slaves by doing a "ypinit -s" on the slaves.

Text of replies:
----------------

** From: Dan Tansue. **

I think that this usually happens when you are adding a new map to the NIS
database. I have typically seen it when adding automount maps to an existing
NIS setup. The "workaround" is to force a transfer of the map with the ypxfr
command like this:

        /usr/etc/yp/ypxfr -f -h NISmaster -d Domainname passwd.adjunct.byname

This is run on all of the NIS servers (master and slaves). That usually does
it for me!

-------------------------------------------------------------------

** From Richard Elling **
This occurs when there isn't such a map in the NIS slave server's
/var/yp/`domainname` directory. You could do a "ypinit -s ..."
on the slave servers. Alternatively, you could get on the slave and:
        cd /var/yp/`domainname`
        touch group.adjunct.byname.dir group.adjunct.byname.pag
        touch passwd.adjunct.byname.dir passwd.adjunct.byname.pag
Then try to push them again.

You will also want to double check your permissions while you are
there. The /var/yp/`domainname` directory is typically created by
ypinit when you are in single user mode. Most people forget that the
default umask in single user mode is 000. This means that the
/var/yp/`domainname` directory may have world write permissions.
This is obviously a gross security problem. So you will want to
check all the NIS maps and the directory for proper permissions.
You will especially want to make sure that the *.adjunct.* files
are only readible by root, otherwise your C2 password exercise is
a wasted effort.

Thanks again for taking the time to reply.

Larry Chin {larry@cch.com} CCH Canadian Ltd.
System Administrator 6 Garamond Court
Research and Development Don Mills, Ontario.
(416) 441-4001 ext. 349 M3C 1Z5

When the government bureau's remedies do not match your problem, you
modify the problem, not the remedy.



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:06:46 CDT