Centos 8 搭建nis域服务

NIS 简介
NIS，英文的全称是network information service，也叫yellow pages。在Linux中，NIS是一个基于RPC的client/server系统，需要使用 RPC 服务。
RPC即Remote Procedure Call Protocol（远程过程调用协议），RPCBIND用于取代旧版本中的portmap组件。简单说，RPCBIND就是为了将不同服务与对应的端口进行绑定，以便支持机器间的相互操作。

网络环境：

节点	主机
node1(nis主服务器)	192.168.10.222
node2(nis客户机)	192.168.10.223

1.环境准备(两个节点都要)

关闭防火墙

systemctl stop firewalld 
setenforce 0

添加主机名解析

vim /etc/hosts
192.168.10.222 node1 
192.168.10.223 node2

2.nis主服务器配置

 下载软件包

yum -y install  rpcbind ypserv ypbind yp-tools 

添加nis域名

[root@localhost ~]# nisdomainname skills.com 
vim /etc/sysconfig/network
NISDOMAIN skills.com

开机自动挂载nis域名

[root@localhost ~]# vim /etc/rc.d/rc.local
 touch /var/lock/subsys/local
/bin/nisdomainname skills.com
[root@localhost ~]# chmod 777 /etc/rc.d/rc.local 

修改主配置文件限制权限

vim /etc/ypserv.conf
192.168.10.0/24:*:*:none   //给与该网段访问权限
192.168.10.222:*:*:none    //给与该本机访问权限
             :*:*:deny     //拒绝其他服务器

重启服务

systemctl restart yppasswdd rpcbind ypserv 
systemctl enable  yppasswdd rpcbind ypserv  

建立资料库

[root@localhost ~]# /usr/lib64/yp/ypinit -m

At this point, we have to construct a list of the hosts which will run NIS
servers.  localhost is in the list of NIS server hosts.  Please continue to add
the names for the other hosts, one per line.  When you are done with the
list, type a <control D>.
        next host to add:  localhost
        next host to add:  
The current list of NIS servers looks like this:

localhost

Is this correct?  [y/n: y]  y
We need a few minutes to build the databases...
Building /var/yp/skills.com/ypservers...
Running /var/yp/Makefile...
gmake[1]: Entering directory '/var/yp/skills.com'
Updating passwd.byname...
Updating passwd.byuid...
Updating group.byname...
Updating group.bygid...
Updating hosts.byname...
Updating hosts.byaddr...
Updating rpc.byname...
Updating rpc.bynumber...
Updating services.byname...
Updating services.byservicename...
Updating netid.byname...
Updating protocols.bynumber...
Updating protocols.byname...
Updating mail.aliases...
gmake[1]: Leaving directory '/var/yp/skills.com'

localhost has been set up as a NIS master server.

Now you can run ypinit -s localhost on all slave server.
[root@localhost ~]# 

新建nis账户

useradd nis1 -p123 
useradd nis2 -p123 
当主机发生了更改就cd到/var/yp make 
[root@localhost ~]# cd /var/yp/
[root@localhost yp]# make
gmake[1]: Entering directory '/var/yp/skills.com'
Updating passwd.byname...
Updating passwd.byuid...
Updating group.byname...
Updating group.bygid...
Updating netid.byname...
gmake[1]: Leaving directory '/var/yp/skills.com'
[root@localhost yp]# 

重启服务

systemctl restart yppasswdd rpcbind ypserv 
systemctl enable  yppasswdd rpcbind ypserv  

3.nis客户端设置 

 下载软件包

yum -y install ypbind rpcbind yp-tools

添加nis域名

[root@localhost ~]# nisdomainname skills.com 
vim /etc/sysconfig/network
NISDOMAIN skills.com

开机自动挂载nis域名

[root@localhost ~]# vim /etc/rc.d/rc.local
 touch /var/lock/subsys/local
/bin/nisdomainname skills.com
[root@localhost ~]# chmod 777 /etc/rc.d/rc.local 

编辑yp.conf文件，设置主服务。 

domain skills.com server 192.168.10.222

重启服务

 systemctl restart ypbind rpcbind 

 yptest查看是否加入成功

[root@localhost ~]# yptest
Test 1: domainname
Configured domainname is "skills.com"

Test 2: ypbind
Use Protocol V1: Used NIS server: 192.168.10.222
Use Protocol V2: Used NIS server: 192.168.10.222
Use Protocol V3:
ypbind_nconf:
        nc_netid: udp
        nc_semantics: 1
        nc_flag: 1
        nc_protofmly: 'inet'
        nc_proto: 'udp'
        nc_device: '-'
        nc_nlookups: 0
ypbind_svcaddr: 192.168.10.222:740
ypbind_servername: 192.168.10.222
ypbind_hi_vers: 2
ypbind_lo_vers: 2

Test 3: yp_match
WARNING: No such key in map (Map passwd.byname, key nobody)

Test 4: yp_first
nis1 nis1:123:1000:1000::/home/nis1:/bin/bash

Test 5: yp_next
nis2 nis2:123:1001:1001::/home/nis2:/bin/bash

Test 6: yp_master
localhost

Test 7: yp_order
1639387530

Test 8: yp_maplist
netid.byname
group.bygid
group.byname
passwd.byuid
passwd.byname
mail.aliases
protocols.byname
protocols.bynumber
services.byservicename
services.byname
rpc.bynumber
rpc.byname
hosts.byaddr
hosts.byname
ypservers

Test 9: yp_all
nis1 nis1:123:1000:1000::/home/nis1:/bin/bash
nis2 nis2:123:1001:1001::/home/nis2:/bin/bash
1 tests failed
[root@localhost ~]# 

配置域用户登陆

[root@localhost ~]# authselect select nis --force
Backup stored at /var/lib/authselect/backups/2021-12-13-09-34-52.8NFKZD
Profile "nis" was selected.
The following nsswitch maps are overwritten by the profile:
- aliases
- automount
- ethers
- group
- hosts
- initgroups
- netgroup
- networks
- passwd
- protocols
- publickey
- rpc
- services
- shadow

Make sure that NIS service is configured and enabled. See NIS documentation for more information.

[root@localhost ~]# 

主服务器配置nfs，将home目录共享。

[root@localhost yp]# vim /etx/exports
/home/ *(rw,sync)
[root@localhost yp]# exportfs -rv
exporting *:/home

客户端挂载主服务器home目录

systemctl restart nfs-server 
[root@localhost ~]# mount 192.168.10.222:/home/ /home/
[root@localhost ~]# df
Filesystem           1K-blocks    Used Available Use% Mounted on
devtmpfs                379852       0    379852   0% /dev
tmpfs                   399816       0    399816   0% /dev/shm
tmpfs                   399816    5688    394128   2% /run
tmpfs                   399816       0    399816   0% /sys/fs/cgroup
/dev/mapper/cl-root   17811456 1615988  16195468  10% /
/dev/sda1              1038336  196688    841648  19% /boot
/dev/sr0               9046654 9046654         0 100% /media
tmpfs                    79960       0     79960   0% /run/user/0
192.168.10.222:/home  17811456 1644672  16166784  10% /home
[root@localhost ~]# 

添加开机自动挂载主服务home目录。

vim /etc/fstab
192.168.10.222:/home    /home                   nfs     defaults        0 0
[root@localhost ~]# mount -a 
[root@localhost ~]# df
Filesystem           1K-blocks    Used Available Use% Mounted on
devtmpfs                379852       0    379852   0% /dev
tmpfs                   399816       0    399816   0% /dev/shm
tmpfs                   399816    5688    394128   2% /run
tmpfs                   399816       0    399816   0% /sys/fs/cgroup
/dev/mapper/cl-root   17811456 1613680  16197776  10% /
/dev/sda1              1038336  196688    841648  19% /boot
/dev/sr0               9046654 9046654         0 100% /media
192.168.10.222:/home  17811456 1644544  16166912  10% /home
tmpfs                    79960       0     79960   0% /run/user/0
[root@localhost ~]# 

到这nis配置完成。