Centos8搭建nis域服务
~槑~ 人气:1NIS 简介
NIS，英文的全称是network information service，也叫yellow pages。在Linux中，NIS是一个基于RPC的client/server系统，需要使用 RPC 服务。
RPC即Remote Procedure Call Protocol（远程过程调用协议），RPCBIND用于取代旧版本中的portmap组件。简单说，RPCBIND就是为了将不同服务与对应的端口进行绑定，以便支持机器间的相互操作。
网络环境：
| 节点 | 主机 |
| node1(nis主服务器) | 192.168.10.222 |
| node2(nis客户机) | 192.168.10.223 |
1.环境准备(两个节点都要)
关闭防火墙
systemctl stop firewalld setenforce 0
添加主机名解析
vim /etc/hosts 192.168.10.222 node1 192.168.10.223 node2
2.nis主服务器配置
下载软件包
yum -y install rpcbind ypserv ypbind yp-tools
添加nis域名
[root@localhost ~]# nisdomainname skills.com vim /etc/sysconfig/network NISDOMAIN skills.com
开机自动挂载nis域名
[root@localhost ~]# vim /etc/rc.d/rc.local touch /var/lock/subsys/local /bin/nisdomainname skills.com [root@localhost ~]# chmod 777 /etc/rc.d/rc.local
修改主配置文件限制权限
vim /etc/ypserv.conf
192.168.10.0/24:*:*:none //给与该网段访问权限
192.168.10.222:*:*:none //给与该本机访问权限
:*:*:deny //拒绝其他服务器
重启服务
systemctl restart yppasswdd rpcbind ypserv systemctl enable yppasswdd rpcbind ypserv
建立资料库
[root@localhost ~]# /usr/lib64/yp/ypinit -m
At this point, we have to construct a list of the hosts which will run NIS
servers. localhost is in the list of NIS server hosts. Please continue to add
the names for the other hosts, one per line. When you are done with the
list, type a <control D>.
next host to add: localhost
next host to add:
The current list of NIS servers looks like this:
localhost
Is this correct? [y/n: y] y
We need a few minutes to build the databases...
Building /var/yp/skills.com/ypservers...
Running /var/yp/Makefile...
gmake[1]: Entering directory '/var/yp/skills.com'
Updating passwd.byname...
Updating passwd.byuid...
Updating group.byname...
Updating group.bygid...
Updating hosts.byname...
Updating hosts.byaddr...
Updating rpc.byname...
Updating rpc.bynumber...
Updating services.byname...
Updating services.byservicename...
Updating netid.byname...
Updating protocols.bynumber...
Updating protocols.byname...
Updating mail.aliases...
gmake[1]: Leaving directory '/var/yp/skills.com'
localhost has been set up as a NIS master server.
Now you can run ypinit -s localhost on all slave server.
[root@localhost ~]#
新建nis账户
useradd nis1 -p123 useradd nis2 -p123 当主机发生了更改就cd到/var/yp make [root@localhost ~]# cd /var/yp/ [root@localhost yp]# make gmake[1]: Entering directory '/var/yp/skills.com' Updating passwd.byname... Updating passwd.byuid... Updating group.byname... Updating group.bygid... Updating netid.byname... gmake[1]: Leaving directory '/var/yp/skills.com' [root@localhost yp]#
重启服务
systemctl restart yppasswdd rpcbind ypserv systemctl enable yppasswdd rpcbind ypserv
3.nis客户端设置
下载软件包
yum -y install ypbind rpcbind yp-tools
添加nis域名
[root@localhost ~]# nisdomainname skills.com vim /etc/sysconfig/network NISDOMAIN skills.com
开机自动挂载nis域名
[root@localhost ~]# vim /etc/rc.d/rc.local touch /var/lock/subsys/local /bin/nisdomainname skills.com [root@localhost ~]# chmod 777 /etc/rc.d/rc.local
编辑yp.conf文件，设置主服务。
domain skills.com server 192.168.10.222
重启服务
systemctl restart ypbind rpcbind
yptest查看是否加入成功
[root@localhost ~]# yptest
Test 1: domainname
Configured domainname is "skills.com"
Test 2: ypbind
Use Protocol V1: Used NIS server: 192.168.10.222
Use Protocol V2: Used NIS server: 192.168.10.222
Use Protocol V3:
ypbind_nconf:
nc_netid: udp
nc_semantics: 1
nc_flag: 1
nc_protofmly: 'inet'
nc_proto: 'udp'
nc_device: '-'
nc_nlookups: 0
ypbind_svcaddr: 192.168.10.222:740
ypbind_servername: 192.168.10.222
ypbind_hi_vers: 2
ypbind_lo_vers: 2
Test 3: yp_match
WARNING: No such key in map (Map passwd.byname, key nobody)
Test 4: yp_first
nis1 nis1:123:1000:1000::/home/nis1:/bin/bash
Test 5: yp_next
nis2 nis2:123:1001:1001::/home/nis2:/bin/bash
Test 6: yp_master
localhost
Test 7: yp_order
1639387530
Test 8: yp_maplist
netid.byname
group.bygid
group.byname
passwd.byuid
passwd.byname
mail.aliases
protocols.byname
protocols.bynumber
services.byservicename
services.byname
rpc.bynumber
rpc.byname
hosts.byaddr
hosts.byname
ypservers
Test 9: yp_all
nis1 nis1:123:1000:1000::/home/nis1:/bin/bash
nis2 nis2:123:1001:1001::/home/nis2:/bin/bash
1 tests failed
[root@localhost ~]#
配置域用户登陆
[root@localhost ~]# authselect select nis --force Backup stored at /var/lib/authselect/backups/2021-12-13-09-34-52.8NFKZD Profile "nis" was selected. The following nsswitch maps are overwritten by the profile: - aliases - automount - ethers - group - hosts - initgroups - netgroup - networks - passwd - protocols - publickey - rpc - services - shadow Make sure that NIS service is configured and enabled. See NIS documentation for more information. [root@localhost ~]#
主服务器配置nfs，将home目录共享。
[root@localhost yp]# vim /etx/exports /home/ *(rw,sync) [root@localhost yp]# exportfs -rv exporting *:/home
客户端挂载主服务器home目录
systemctl restart nfs-server [root@localhost ~]# mount 192.168.10.222:/home/ /home/ [root@localhost ~]# df Filesystem 1K-blocks Used Available Use% Mounted on devtmpfs 379852 0 379852 0% /dev tmpfs 399816 0 399816 0% /dev/shm tmpfs 399816 5688 394128 2% /run tmpfs 399816 0 399816 0% /sys/fs/cgroup /dev/mapper/cl-root 17811456 1615988 16195468 10% / /dev/sda1 1038336 196688 841648 19% /boot /dev/sr0 9046654 9046654 0 100% /media tmpfs 79960 0 79960 0% /run/user/0 192.168.10.222:/home 17811456 1644672 16166784 10% /home [root@localhost ~]#
添加开机自动挂载主服务home目录。
vim /etc/fstab 192.168.10.222:/home /home nfs defaults 0 0 [root@localhost ~]# mount -a [root@localhost ~]# df Filesystem 1K-blocks Used Available Use% Mounted on devtmpfs 379852 0 379852 0% /dev tmpfs 399816 0 399816 0% /dev/shm tmpfs 399816 5688 394128 2% /run tmpfs 399816 0 399816 0% /sys/fs/cgroup /dev/mapper/cl-root 17811456 1613680 16197776 10% / /dev/sda1 1038336 196688 841648 19% /boot /dev/sr0 9046654 9046654 0 100% /media 192.168.10.222:/home 17811456 1644544 16166912 10% /home tmpfs 79960 0 79960 0% /run/user/0 [root@localhost ~]#
到这nis配置完成。
加载全部内容