This is from Arup Mitra.
1. Installing nisplus server
/usr/lib/nis/nisserver -v -r -d atac.ebay.sun.com.
******** ******** WARNING ******** ********
NIS+ might not be supported in a future release. Tools to aid
the migration from NIS+ to LDAP are available in the Solaris 9
operating environment. For more information, visit
http://www.sun.com/directory/nisplus/transition.html
******** ******** ******* ******** ********
This script sets up this machine “native9” as an NIS+
root master server for domain atac.ebay.sun.com..
Domain name : atac.ebay.sun.com.
NIS+ group : admin.atac.ebay.sun.com.
NIS (YP) compatibility : OFF
Security level : 2=DES
Is this information correct? (type ‘y’ to accept, ‘n’ to change) y
This script will set up your machine as a root master server for
domain atac.ebay.sun.com. without NIS compatibility at security level 2.
Use “nisclient -r” to restore your current network service environment.
Do you want to continue? (type ‘y’ to continue, ‘n’ to exit this script) y
setting up domain information “atac.ebay.sun.com.” …
setting up switch information …
killing process keyserv …
restarting process keyserv …
killing NIS and NIS+ processes …
killing process ypbind …
killing process rpc.nisd …
killing process rpc.nispasswdd …
killing process nis_cachemgr …
stopping nscd …
setup NIS_GROUP environment variable …
rm /var/nis files …
running nisinit …
This machine is in the “atac.ebay.sun.com.” NIS+ domain.
Setting up root server …
All done.
starting root server at security level 0 to create credentials…
running nissetup to create standard directories and tables …
org_dir.atac.ebay.sun.com. created
groups_dir.atac.ebay.sun.com. created
passwd.org_dir.atac.ebay.sun.com. created
group.org_dir.atac.ebay.sun.com. created
auto_master.org_dir.atac.ebay.sun.com. created
auto_home.org_dir.atac.ebay.sun.com. created
bootparams.org_dir.atac.ebay.sun.com. created
cred.org_dir.atac.ebay.sun.com. created
ethers.org_dir.atac.ebay.sun.com. created
hosts.org_dir.atac.ebay.sun.com. created
ipnodes.org_dir.atac.ebay.sun.com. created
mail_aliases.org_dir.atac.ebay.sun.com. created
sendmailvars.org_dir.atac.ebay.sun.com. created
netmasks.org_dir.atac.ebay.sun.com. created
netgroup.org_dir.atac.ebay.sun.com. created
networks.org_dir.atac.ebay.sun.com. created
protocols.org_dir.atac.ebay.sun.com. created
rpc.org_dir.atac.ebay.sun.com. created
services.org_dir.atac.ebay.sun.com. created
timezone.org_dir.atac.ebay.sun.com. created
client_info.org_dir.atac.ebay.sun.com. created
auth_attr.org_dir.atac.ebay.sun.com. created
exec_attr.org_dir.atac.ebay.sun.com. created
prof_attr.org_dir.atac.ebay.sun.com. created
user_attr.org_dir.atac.ebay.sun.com. created
audit_user.org_dir.atac.ebay.sun.com. created
adding credential for native9.atac.ebay.sun.com…
Enter login password:
creating NIS+ administration group: admin.atac.ebay.sun.com. …
adding principal native9.atac.ebay.sun.com. to admin.atac.ebay.sun.com. …
updating the keys for directories …
restarting NIS+ root master server at security level 2 …
killing process rpc.nisd …
restarting process rpc.nisd …
starting NIS+ password daemon …
starting NIS+ cache manager …
modifying the /etc/init.d/rpc file …
starting Name Service Cache Daemon nscd …
This system is now configured as a root server for domain atac.ebay.sun.com.
You can now populate the standard NIS+ tables by using the
nispopulate script or /usr/lib/nis/nisaddent command.
2. Populating NIS+ tables
# cd /source
# ls -al
total 32
drwxr-xr-x 2 root other 512 Apr 16 16:02 .
drwxr-xr-x 27 root root 512 Apr 14 19:49 ..
-rw-r–r– 1 root other 18 Apr 16 15:59 auto_home
-rw-r–r– 1 root other 69 Apr 16 16:00 auto_master
-rw-r–r– 1 root other 290 Apr 14 19:51 group
-r–r–r– 1 root other 128 Apr 14 19:52 hosts
-r–r–r– 1 root other 380 Apr 16 16:02 netmasks
-r–r–r– 1 root other 372 Apr 16 16:01 networks
-rw-r–r– 1 root other 109 Apr 15 14:49 passwd
-r–r–r– 1 root other 1807 Apr 16 16:02 protocols
-r–r–r– 1 root other 3869 Apr 16 16:02 services
-rw-r–r– 1 root other 80 Apr 15 14:48 shadow
# /usr/lib/nis/nispopulate -v -F
NIS+ domain name : atac.ebay.sun.com.
Directory Path : (current directory)
Is this information correct? (type ‘y’ to accept, ‘n’ to change) y
This script will populate the standard NIS+ tables for domain
atac.ebay.sun.com. from the files in current directory:
auto_master auto_home ethers group hosts ipnodes networks passwd protocols services rpc netmasks bootparams netgroup aliases timezone auth_attr exec_attr prof_attr user_attr audit_user shadow
**WARNING: Interrupting this script after choosing to continue
may leave the tables only partially populated. This script does
not do any automatic recovery or cleanup.
Do you want to continue? (type ‘y’ to continue, ‘n’ to exit this script) y
auto_master.org_dir.atac.ebay.sun.com. OK…
populating auto_master table from file ./auto_master…
adding standard key-value table auto_master…
adding ./auto_master to table auto_master.org_dir.atac.ebay.sun.com.
adding/updating “/net”
adding/updating “/home”
adding/updating “/xfn”
3 entries added/updated
auto_master table done.
auto_home.org_dir.atac.ebay.sun.com. OK…
populating auto_home table from file ./auto_home…
adding standard key-value table auto_home…
adding ./auto_home to table auto_home.org_dir.atac.ebay.sun.com.
adding/updating “*”
1 entries added/updated
auto_home table done.
ethers.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./ethers does not exist!
ethers table will not be loaded.
group.org_dir.atac.ebay.sun.com. OK…
populating group table from file ./group…
adding standard table group…
adding ./group to table group.org_dir.atac.ebay.sun.com.
adding/updating “root”
adding/updating “other”
adding/updating “bin”
adding/updating “sys”
adding/updating “adm”
adding/updating “uucp”
adding/updating “mail”
adding/updating “tty”
adding/updating “lp”
adding/updating “nuucp”
adding/updating “staff”
adding/updating “daemon”
adding/updating “sysadmin”
adding/updating “smmsp”
adding/updating “nobody”
adding/updating “noaccess”
adding/updating “nogroup”
17 entries added/updated
group table done.
hosts.org_dir.atac.ebay.sun.com. OK…
populating hosts table from file ./hosts…
adding standard table hosts…
adding ./hosts to table hosts.org_dir.atac.ebay.sun.com.
adding/updating “localhost”
adding/updating “native9”
adding/updating “igs”
adding/updating “arup”
adding/updating “daredevil”
5 entries added/updated
hosts table done.
Populating the NIS+ credential table for domain atac.ebay.sun.com.
from hosts table.
dumping hosts table…
loading credential table…
Adding key pair for [email protected] (arup.atac.ebay.sun.com.).
…added arup
Adding key pair for [email protected] (daredevil.atac.ebay.sun.com.).
…added daredevil
Adding key pair for [email protected] (igs.atac.ebay.sun.com.).
…added igs
Adding key pair for [email protected] (localhost.atac.ebay.sun.com.).
…added localhost
…native9 already exists
The credential table for domain atac.ebay.sun.com. has been populated.
The password used will be nisplus.
ipnodes.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./ipnodes does not exist!
ipnodes table will not be loaded.
networks.org_dir.atac.ebay.sun.com. OK…
populating networks table from file ./networks…
adding standard table networks…
adding ./networks to table networks.org_dir.atac.ebay.sun.com.
adding/updating “loopback”
adding/updating “arpanet”
adding/updating “arpanet (arpa)”
3 entries added/updated
networks table done.
passwd.org_dir.atac.ebay.sun.com. OK…
populating passwd table from file ./passwd…
adding standard table passwd…
adding ./passwd to table passwd.org_dir.atac.ebay.sun.com.
adding/updating “test1”
adding/updating “arup”
adding/updating “test2”
3 entries added/updated
passwd table done.
Populating the NIS+ credential table for domain atac.ebay.sun.com.
from passwd table.
dumping passwd table…
loading credential table…
Adding key pair for [email protected] (test1.atac.ebay.sun.com.).
…added test1
…arup already exists
Adding key pair for [email protected] (test2.atac.ebay.sun.com.).
…added test2
The credential table for domain atac.ebay.sun.com. has been populated.
The password used will be nisplus.
protocols.org_dir.atac.ebay.sun.com. OK…
populating protocols table from file ./protocols…
adding standard table protocols…
adding ./protocols to table protocols.org_dir.atac.ebay.sun.com.
adding/updating “ip”
adding/updating “icmp”
adding/updating “igmp”
adding/updating “ggp”
adding/updating “ipip”
adding/updating “ipip (IP-IP)”
adding/updating “tcp”
adding/updating “cbt”
adding/updating “egp”
adding/updating “igp”
adding/updating “pup”
adding/updating “udp”
adding/updating “mux”
adding/updating “hmp”
adding/updating “xns-idp”
adding/updating “rdp”
adding/updating “idpr”
adding/updating “idpr-cmtp”
adding/updating “sdrp”
adding/updating “idrp”
adding/updating “rsvp”
adding/updating “gre”
adding/updating “mobile”
adding/updating “ospf”
adding/updating “ospf (OSPFIGP)”
adding/updating “pim”
adding/updating “ipcomp”
adding/updating “vrrp”
adding/updating “sctp”
adding/updating “hopopt”
adding/updating “ipv6”
adding/updating “ipv6-route”
adding/updating “ipv6-frag”
adding/updating “esp”
adding/updating “ah”
adding/updating “ipv6-icmp”
adding/updating “ipv6-nonxt”
adding/updating “ipv6-opts”
38 entries added/updated
protocols table done.
services.org_dir.atac.ebay.sun.com. OK…
populating services table from file ./services…
adding standard table services…
adding ./services to table services.org_dir.atac.ebay.sun.com.
adding/updating “tcpmux 1/tcp”
adding/updating “echo 7/tcp”
adding/updating “echo 7/udp”
adding/updating “discard 9/tcp”
adding/updating “discard 9/tcp (sink)”
adding/updating “discard 9/tcp (null)”
adding/updating “discard 9/udp”
adding/updating “discard 9/udp (sink)”
adding/updating “discard 9/udp (null)”
adding/updating “systat 11/tcp”
adding/updating “systat 11/tcp (users)”
adding/updating “daytime 13/tcp”
adding/updating “daytime 13/udp”
adding/updating “netstat 15/tcp”
adding/updating “chargen 19/tcp”
adding/updating “chargen 19/tcp (ttytst)”
adding/updating “chargen 19/tcp (source)”
adding/updating “chargen 19/udp”
adding/updating “chargen 19/udp (ttytst)”
adding/updating “chargen 19/udp (source)”
adding/updating “ftp-data 20/tcp”
adding/updating “ftp 21/tcp”
adding/updating “ssh 22/tcp”
adding/updating “telnet 23/tcp”
adding/updating “smtp 25/tcp”
adding/updating “smtp 25/tcp (mail)”
adding/updating “time 37/tcp”
adding/updating “time 37/tcp (timserver)”
adding/updating “time 37/udp”
adding/updating “time 37/udp (timserver)”
adding/updating “name 42/udp”
adding/updating “name 42/udp (nameserver)”
adding/updating “whois 43/tcp”
adding/updating “whois 43/tcp (nicname)”
adding/updating “domain 53/udp”
adding/updating “domain 53/tcp”
adding/updating “bootps 67/udp”
adding/updating “bootpc 68/udp”
adding/updating “kerberos 88/udp”
adding/updating “kerberos 88/udp (kdc)”
adding/updating “kerberos 88/tcp”
adding/updating “kerberos 88/tcp (kdc)”
adding/updating “hostnames 101/tcp”
adding/updating “hostnames 101/tcp (hostname)”
adding/updating “pop2 109/tcp”
adding/updating “pop2 109/tcp (pop-2)”
adding/updating “pop3 110/tcp”
adding/updating “sunrpc 111/udp”
adding/updating “sunrpc 111/udp (rpcbind)”
adding/updating “sunrpc 111/tcp”
adding/updating “sunrpc 111/tcp (rpcbind)”
adding/updating “imap 143/tcp”
adding/updating “imap 143/tcp (imap2)”
adding/updating “ldap 389/tcp”
adding/updating “ldap 389/udp”
adding/updating “submission 587/tcp”
adding/updating “submission 587/udp”
adding/updating “ldaps 636/tcp”
adding/updating “ldaps 636/udp”
adding/updating “tftp 69/udp”
adding/updating “rje 77/tcp”
adding/updating “finger 79/tcp”
adding/updating “link 87/tcp”
adding/updating “link 87/tcp (ttylink)”
adding/updating “supdup 95/tcp”
adding/updating “iso-tsap 102/tcp”
adding/updating “x400 103/tcp”
adding/updating “x400-snd 104/tcp”
adding/updating “csnet-ns 105/tcp”
adding/updating “pop-2 109/tcp”
adding/updating “uucp-path 117/tcp”
adding/updating “nntp 119/tcp”
adding/updating “nntp 119/tcp (usenet)”
adding/updating “ntp 123/tcp”
adding/updating “ntp 123/udp”
adding/updating “netbios-ns 137/tcp”
adding/updating “netbios-ns 137/udp”
adding/updating “netbios-dgm 138/tcp”
adding/updating “netbios-dgm 138/udp”
adding/updating “netbios-ssn 139/tcp”
adding/updating “netbios-ssn 139/udp”
adding/updating “NeWS 144/tcp”
adding/updating “slp 427/tcp”
adding/updating “slp 427/udp”
adding/updating “mobile-ip 434/udp”
adding/updating “cvc_hostd 442/tcp”
adding/updating “ike 500/udp”
adding/updating “uuidgen 697/tcp”
adding/updating “uuidgen 697/udp”
adding/updating “exec 512/tcp”
adding/updating “login 513/tcp”
adding/updating “shell 514/tcp”
adding/updating “shell 514/tcp (cmd)”
adding/updating “printer 515/tcp”
adding/updating “printer 515/tcp (spooler)”
adding/updating “courier 530/tcp”
adding/updating “courier 530/tcp (rpc)”
adding/updating “uucp 540/tcp”
adding/updating “uucp 540/tcp (uucpd)”
adding/updating “biff 512/udp”
adding/updating “biff 512/udp (comsat)”
adding/updating “who 513/udp”
adding/updating “who 513/udp (whod)”
adding/updating “syslog 514/udp”
adding/updating “talk 517/udp”
adding/updating “route 520/udp”
adding/updating “route 520/udp (router)”
adding/updating “route 520/udp (routed)”
adding/updating “ripng 521/udp”
adding/updating “klogin 543/tcp”
adding/updating “kshell 544/tcp”
adding/updating “kshell 544/tcp (cmd)”
adding/updating “new-rwho 550/udp”
adding/updating “new-rwho 550/udp (new-who)”
adding/updating “rmonitor 560/udp”
adding/updating “rmonitor 560/udp (rmonitord)”
adding/updating “monitor 561/udp”
adding/updating “pcserver 600/tcp”
adding/updating “sun-dr 665/tcp”
adding/updating “kerberos-adm 749/tcp”
adding/updating “kerberos-adm 749/udp”
adding/updating “kerberos-iv 750/udp”
adding/updating “krb5_prop 754/tcp”
adding/updating “ufsd 1008/tcp”
adding/updating “ufsd 1008/udp”
adding/updating “cvc 1495/tcp”
adding/updating “ingreslock 1524/tcp”
adding/updating “www-ldap-gw 1760/tcp”
adding/updating “www-ldap-gw 1760/udp”
adding/updating “listen 2766/tcp”
adding/updating “nfsd 2049/udp”
adding/updating “nfsd 2049/udp (nfs)”
adding/updating “nfsd 2049/tcp”
adding/updating “nfsd 2049/tcp (nfs)”
adding/updating “eklogin 2105/tcp”
adding/updating “lockd 4045/udp”
adding/updating “lockd 4045/tcp”
adding/updating “dtspc 6112/tcp”
adding/updating “fs 7100/tcp”
139 entries added/updated
services table done.
rpc.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./rpc does not exist!
rpc table will not be loaded.
netmasks.org_dir.atac.ebay.sun.com. OK…
populating netmasks table from file ./netmasks…
adding standard table netmasks…
adding ./netmasks to table netmasks.org_dir.atac.ebay.sun.com.
adding/updating “10.4.17.0”
1 entries added/updated
netmasks table done.
bootparams.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./bootparams does not exist!
bootparams table will not be loaded.
netgroup.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./netgroup does not exist!
netgroup table will not be loaded.
mail_aliases.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./aliases does not exist!
mail_aliases table will not be loaded.
timezone.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./timezone does not exist!
timezone table will not be loaded.
auth_attr.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./auth_attr does not exist!
auth_attr table will not be loaded.
exec_attr.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./exec_attr does not exist!
exec_attr table will not be loaded.
prof_attr.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./prof_attr does not exist!
prof_attr table will not be loaded.
user_attr.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./user_attr does not exist!
user_attr table will not be loaded.
audit_user.org_dir.atac.ebay.sun.com. OK…
**WARNING: file ./audit_user does not exist!
audit_user table will not be loaded.
passwd.org_dir.atac.ebay.sun.com. OK…
populating passwd table from file ./shadow…
adding standard table passwd…
adding ./shadow to table passwd.org_dir.atac.ebay.sun.com.
adding/updating “test1”
adding/updating “arup”
adding/updating “test2”
3 entries added/updated
passwd table done.
Credentials have been added for the entries in the
hosts and passwd table(s). Each entry was given a default
network password (also known as a Secure-RPC password).
This password is:
nisplus
Use this password when the nisclient script requests the
network password.
nispopulate failed to populate the following tables:
ethers ipnodes rpc bootparams netgroup mail_aliases timezone auth_attr exec_attr prof_attr user_attr audit_user
3. Testing that NIS+ master is operational
# ps -ef | grep rpc.nisd
root 509 1 0 16:05:14 ? 0:02 rpc.nisd
# /usr/bin/nisls
atac.ebay.sun.com.:
org_dir
groups_dir
# /usr/bin/niscat passwd.org_dir
test1:7l7c7hBNh8gCc:1001:10::/home/test1:/bin/sh:::::::
arup:gl.r/Ug8qln4c:1002:10::/home/arup:/bin/sh:::::::
test2:B3Tg5MA6FSu3c:1003:10::/home/test2:/bin/sh:::::::
4. Adding a NIS+ client
a) On the master server:
# /usr/lib/nis/nisclient -v -d atac.ebay.sun.com -c igs
******** ******** WARNING ******** ********
NIS+ might not be supported in a future release. Tools to aid
the migration from NIS+ to LDAP are available in the Solaris 9
operating environment. For more information, visit
http://www.sun.com/directory/nisplus/transition.html
******** ******** ******* ******** ********
You will be adding DES credentials in domain atac.ebay.sun.com. for
igs
** nisclient will not overwrite any existing entries in the
** credential table.
Do you want to continue? (type ‘y’ to continue, ‘n’ to exit this script) y
checking atac.ebay.sun.com. domain…
checking cred.org_dir.atac.ebay.sun.com. permission…
checking info type for igs…
… principal igs already exist — skipped!
b) On the client host called igs:
#/usr/lib/nis/nisclient -v -i -h native9 -a 10.4.17.106 -d atac.ebay.sun.com
initializing client machine…
Initializing client igs for domain “atac.ebay.sun.com.”.
Once initialization is done, you will need to reboot your
machine.
Do you want to continue? (type ‘y’ to continue, ‘n’ to exit this script) y
killing NIS and/or NIS+ processes…
killing process ypbind…
killing process nis_cachemgr…
killing process rpc.nispasswdd…
stopping nscd …
setting up backup files…
setting up NIS+ server information…
setting up domain information “atac.ebay.sun.com.”…
setting up the name service switch information…
killing process keyserv…
running nisinit command …
nisinit -c -H 10.4.17.106 …
credential exists for setting up security…
setting up security information for root…
At the prompt below, type the network password (also known
as the Secure-RPC password) that you obtained either
from your administrator or from running the nispopulate script.
Please enter the Secure-RPC password for root: nisplus
Please enter the login password for root: root_passwd_for_this_client_machine
Your network password has been changed to your login one.
Your network and login passwords are now the same.
killing process nis_cachemgr…
starting nscd …
removing the temporary backup file for /etc/nsswitch.conf…
Client initialization completed!!
Please reboot your machine for changes to take effect.
5. Change /etc/nsswicth.conf appropriately and reboot client machine
passwd: files nisplus
group: files nisplus
hosts: files nisplus
services: nisplus files
networks: nisplus files
protocols: nisplus files
rpc: nisplus files
ethers: nisplus files
netmasks: nisplus files
bootparams: nisplus files
publickey: nisplus
netgroup: files nisplus
automount: files nisplus
aliases: files nisplus
sendmailvars: files nisplus
6. Test from client_machine that you can login as a NIS+ user with proper home
directory
7. Now install the built-in IDS 5.1 on solaris 9 server
/usr/sbin/directoryserver setup
8. Then run idsconfig
# /usr/lib/ldap/idsconfig
and follow instructions from URL:
http://docs.sun.com/db/doc/816-7511/6md … dssetup-33
9. stop-slapd
10. Do the vlvindexing for six fields:
# /usr/sbin/directoryserver -s native9 vlvindex -n userRoot -T
atac.ebay.sun.com.getgrent
and similarly for atac.ebay.sun.com.gethostent , atac.ebay.sun.com.getnetent ..
and so on
11 start-slapd
12. From the cosole of the IDS, we have to create a ou=nisPlus underneath
dc=atac.ebay.sun.com , and again ou=nisPlus underneath the earlier
ou=nisPlus
13. We need to look for a file called /var/nis/NIS+LDAPmapping.template and, if
present , we need to copy it to /var/nis/NIS+LDAPmapping
14. We need to look for a file called /etc/default/rpc.nisd , and we need to do
a few changes there. But before that we backup /etc/default/rpc.nisd
The four main changes are:
line 117, make sure authentication is simple
line 123, defaultsearchbase=dc=atac.ebay.sun.com
line 146, needs to read nisPlusLDAPproxyuser=cn=directory manager
line 154 is your directory manager password, you need to change that
15. We manually update the schema in IDS 5.1 for attribute nisPlusObject
a) Pease have a copy of 99user.ldif file first
b) Please add these lines in
/slapd-instance/config/schema/99user.ldif
objectClasses: ( 1.3.6.1.4.1.42.2.27.5.42.42.2.0 NAME ‘nisplusObjectContainer’
DESC ‘Abstraction of an NIS+ object’ STRUCTURAL MUST ( cn $ nisplusObject )
X-ORIGIN ‘user defined’ )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.1.0 NAME ‘nisplusObject’ DESC
‘An opaque representation of an NIS+ object’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.5
SINGLE-VALUE X-ORIGIN ‘user defined’ )
16. pkill -9 rpc.nisd
17. In order to automatically dump all data from nis+ to ldap and then exit out:
# rpc.nisd -D -x nisplusLDAPinitialUpdateAction=to_ldap
-x nisplusLDAPinitialUpdateOnly=yes
It is also advisable to :
tail -f access
tail -f errors
on two separate consoles to look for possible errors and problems. These are
our only clues as to what is going wrong
PS: Thing to note is that if those tables possibly not proper in NIS+, they
might give different errors in access log, but otherwise all data come
across fine, and then rpc.nisd exits out.
18. Check in ldap that all data have come across by appropriate ldapsearch
19. We may also build a native ldap client on a different solaris 9 client
and test the ldap data on server by logging in with home directories
20. Now, to keep both NIS+ & LDAP always in synch , start rpc.nisd normally:
/usr/sbin/rpc.nisd
21. In order to test if they are really in synch:
a) Modify NIS+ hosts table by:
/usr/lib/nis/nisaddent -d hosts > /tmp/hosts
vi /tmp/hosts and insert an additional host entry there
/usr/lib/nis/nisaddent -rvf /tmp/hosts hosts
b) # niscat hosts.org_dir , and check if that entry came into nis+
b) Check the access log that immediately the new nis+ entries are pushed to
ldap
c) ldapsearch for the appropriate hosts entry by:
ldapsearch -b “dc=atac.ebay.sun.com” ipHostNumber=*
and observe that it appeared into ldap automatically
