DOCUMENT ID:  1193-02

SYNOPSIS:     How to setup a Solaris x86 2.4 machine as an NIS+ server

OS RELEASE:   2.4

PRODUCT:      Solaris x86, Solaris NIS+

KEYWORDS:     NIS+ server system administrator client


DESCRIPTION:

This document outlines the minimum steps required to setup an NIS+
server, define a NIS+ system administrator, and setup an NIS+ client. 


SOLUTION:

It is assumed that Solaris was installed onto a standalone machine and
that no service, as of yet, has been defined.  If this is not the case,
it is recommended that 'sys-unconfig' be run in order to "blank" out the
system so that it has no knowledge of other systems, a network,
services, or even its own name. 

1) Adding a new group for the NIS+ administrator.

   Use 'admintool' and select Database Manager.
   Select None for Naming Service.
   Select Group and then Load.
   Select Edit->Add and define a new group called "admin" and give
   it a GID of 11 (the first available one starting from 0).

2) Adding a user who is a member of the "admin" group.

   This will be the NIS+ administrator.

   Use 'admintool' and select the User Account Manager.
   Select None for the Naming Service.
   Select Edit->Add.

       Primary Group: admin
       Secondary Group: staff
       Create Home Dir: yes
       Path: /export/home/'username'
       Skeleton Path: /etc/skel
       Autohome Setup: yes

   The rest of the fields can be filled out or selected at your
   discretion.

3) As root on the Server, execute:

   /usr/lib/nis/nisserver -r -d NIS+_DOMAINNAME.

   For example:
 
        /usr/lib/nis/nisserver -r -d support.West.Sun.COM
 
   And then:
 
        /usr/lib/nis/nispopulate -F -d NIS+_DOMAINNAME -p /etc

4) Execute /usr/lib/nis/nislog and then press CTRL-C to break out
   of it, otherwise it will take a while before it stops.

5) Execute /usr/lib/nis/nisping -C NIS+_DOMAINNAME.

6) Enable DNS (if desired) in /etc/nsswitch.conf by uncommenting
   the line that looks like:

        #hosts:      nisplus dns [NOTFOUND=return] files

   by removing the '#' and inserting a '#' at the beginning of the
   line that looks like:

        hosts:      nisplus [NOTFOUND=return] files

7) Export the /export filesystem so that the users' home
   directories can be mounted onto the clients' from the server.

   Add the line:

   share -F nfs -o rw -d "home dirs" /export/home

   to /etc/dfs/dfstab and then execute that same line on the
   command line to share the /export/home directory now.

8) Restart the rpc.nisd process at security level 0 so that the
   NIS+ administrator can set its NIS+ credentials.

   # ps -e|grep rpc.nisd       (to get the PID of rpc.nisd)
   # kill PID                  (replace PID with the number
                                obtained in the previous step)
   # rpc.nisd -S0

9) Switch-user to the administrator you defined in step 2 so that
   you add credentials while the security level is 0:

   # su 'username'
   $ nisaddcred local
   $ nisaddcred des
   $ exit
   #

10) Repeat step 8, but start rpc.nisd without any parameters.


DATE APPROVED: 09/25/95