类别：原创 服务器  
第一：说明，软件说明，和安装的目的
架设基于linux下的NIS服务器，统一所有的机器账号。

第二：本例操作环境
所使用的系统环境为 Centos 6.5 64位操作系统    
[root@jedy ~]# uname -a    
Linux jedy 2.6.32-431.5.1.el6.x86_64 #1 SMP Wed Feb 12 00:41:43 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux    
[root@jedy ~]# hostname    
jedy    
[root@jedy ~]# more /etc/redhat-release    
CentOS release 6.5 (Final)    
[root@jedy ~]#


第三：NIS 服务器配置    
1.设置NIS域名
[root@jedy ~]# nisdomainname    
[root@jedy ~]# nisdomainname test.com             \\ 增加nis域 这种设置马上生效    
[root@jedy ~]# nisdomainname    
test.com    
[root@jedy ~]# echo "nisdomainname test.com "  >>/etc/rc.local \\这种设置可保障计算机重启后NIS 域名不变    
[root@jedy ~]# echo "NSIDOMAIN=test.com "  >>/etc/sysconfig/network \\这种设置要在network服务启动时生效    
[root@jedy ~]#    
[root@jedy ~]# more /etc/rc.local    
#!/bin/sh    
#    
# This script will be executed *after* all the other init scripts.    
# You can put your own initialization stuff in here if you don't    
# want to do the full Sys V style init stuff.

touch /var/lock/subsys/local  
nisdomainname test.com    
[root@jedy ~]# more /etc/sysconfig/network                    
NETWORKING=yes    
HOSTNAME=localhost.localdomain    
GATEWAY=*.*.*.*    
NSIDOMAIN=test.com    
[root@jedy ~]# service network restart  \\重新启动network服务    
Shutting down interface eth0:  Device state: 3 (disconnected)    
                                                          [  OK  ]    
Shutting down loopback interface:                          [  OK  ]    
Bringing up loopback interface:                            [  OK  ]    
Bringing up interface eth0:  Active connection state: activated    
Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/1    
                                                          [  OK  ]    
[root@jedy ~]#

2.修改/etc/hosts，增加解析
[root@jedy ~]# cat /etc/hosts    
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4    
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6    
127.0.0.1   nis.test.com     test.com                      \\ 增加这一行    
[root@jedy ~]# ping nis.test.com    
PING nis.test.com (127.0.0.1) 56(84) bytes of data.    
64 bytes from localhost (127.0.0.1): icmp_seq=1 ttl=64 time=0.086 ms    
64 bytes from localhost (127.0.0.1): icmp_seq=2 ttl=64 time=0.076 ms    
^C    
--- nis.test.com ping statistics ---    
2 packets transmitted, 2 received, 0% packet loss, time 1383ms    
rtt min/avg/max/mdev = 0.076/0.081/0.086/0.005 ms    
[root@jedy ~]#

3.安装必须的软件包
ypbind    
yp-tools    
ypserv    
[root@jedy ~]#    
[root@jedy ~]# yum install -y  yp*    
[root@jedy ~]#

4.修改主配置文件/etc/ypserv.conf  
[root@jedy ~]#    
[root@jedy ~]# tail /etc/ypserv.conf    
# If you comment out the next rule, ypserv and rpc.ypxfrd will    
# look for YP_SECURE and YP_AUTHDES in the maps. This will make    
# the security check a little bit slower, but you only have to    
# change the keys on the master server, not the configuration files    
# on each NIS server.    
# If you have maps with YP_SECURE or YP_AUTHDES, you should create    
# a rule for them above, that's much faster.    
# *                        : *       : *                : none    
127.0.0.0/255.255.255.0    : *       : *                : none

[root@jedy ~]#

5.启动相应的服务
[root@jedy ~]#    
[root@jedy ~]# service rpcbind restart    
Stopping rpcbind:                                          [FAILED]    
Starting rpcbind:                                          [  OK  ]    
[root@jedy ~]# service ypserv restart    
Stopping YP server services:                               [FAILED]    
Starting YP server services:                               [  OK  ]    
[root@jedy yum.repos.d]# service  yppasswdd restart    
Stopping YP passwd service:                                [FAILED]    
Starting YP passwd service:                                [  OK  ]    
[root@jedy yum.repos.d]# service  ypbind restart    
Shutting down NIS service:                                 [  OK  ]    
Starting NIS service:                                      [  OK  ]    
Binding NIS service:                                       [  OK  ]    
[root@jedy yum.repos.d]#

6.添加用来测试的用户aa,bb,并更新NIS信息数据库
[root@jedy ~]# useradd aa    
[root@jedy ~]# useradd bb    
[root@jedy ~]# su aa    
[aa@localhost root]$ exit    
exit    
[root@jedy ~]# su bb    
[bb@localhost root]$ exit    
exit    
[root@jedy ~]#    
[root@jedy ~]# tail /etc/passwd    
dbus:x:81:81:System message bus:/:/sbin/nologin    
avahi-autoipd:x:170:170:Avahi IPv4LL Stack:/var/lib/avahi-autoipd:/sbin/nologin    
rtkit:x:498:496:RealtimeKit:/proc:/sbin/nologin    
pulse:x:497:495:PulseAudio System Daemon:/var/run/pulse:/sbin/nologin    
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin    
gdm:x:42:42::/var/lib/gdm:/sbin/nologin    
ntp:x:38:38::/etc/ntp:/sbin/nologin    
rpc:x:32:32:Rpcbind Daemon:/var/cache/rpcbind:/sbin/nologin    
aa:x:500:500::/home/aa:/bin/bash    
bb:x:501:501::/home/bb:/bin/bash    
[root@jedy ~]#    
[root@jedy ~]# /usr/lib64/yp/ypinit -m

At this point, we have to construct a list of the hosts which will run NIS  
servers.  localhost is in the list of NIS server hosts.  Please continue to add    
the names for the other hosts, one per line.  When you are done with the    
list, type a <control D>.    
       next host to add:  localhost    
       next host to add:  
The current list of NIS servers looks like this:

localhost

Is this correct?  [y/n: y]  y  
We need a few minutes to build the databases...    
Building /var/yp/test.com/ypservers...    
Running /var/yp/Makefile...    
gmake[1]: Entering directory `/var/yp/test.com'    
Updating passwd.byname...    
Updating passwd.byuid...    
Updating group.byname...    
Updating group.bygid...    
Updating hosts.byname...    
Updating hosts.byaddr...    
Updating rpc.byname...    
Updating rpc.bynumber...    
Updating services.byname...    
Updating services.byservicename...    
Updating netid.byname...    
Updating protocols.bynumber...    
Updating protocols.byname...    
Updating mail.aliases...    
gmake[1]: Leaving directory `/var/yp/test.com'

localhost has been set up as a NIS master server.

Now you can run ypinit -s localhost on all slave server.  
[root@jedy ~]#    
[root@jedy test.com]# ypcat -h localhost passwd.byname       \\查看共享出来的用户    
bb:!!:501:501::/home/bb:/bin/bash    
aa:!!:500:500::/home/aa:/bin/bash    
[root@jedy test.com]#

第四：NIS 客户端配置

1.[root@jedy ~]# vi /etc/nsswitch.conf  
# 这个文件的内容有相当多，不过如果你只想要进行登入验证，可以这样：    
passwd: files nis    
shadow: files nis    
group:  files nis    
hosts:  files nis dns  

2.[root@jedy ~]# more /etc/sysconfig/authconfig      
IPADOMAINJOINED=no    
USEMKHOMEDIR=no    
USEPAMACCESS=no    
CACHECREDENTIALS=yes    
USESSSDAUTH=no    
USESHADOW=yes    
USEWINBIND=no    
USESSSD=no    
PASSWDALGORITHM=sha512    
FORCELEGACY=no    
USEFPRINTD=no    
USEHESIOD=no    
FORCESMARTCARD=no    
USELDAPAUTH=no    
IPAV2NONTP=no    
USELDAP=no    
USECRACKLIB=yes    
USEIPAV2=no    
USEWINBINDAUTH=no    
USESMARTCARD=no    
USELOCAUTHORIZE=yes    
USENIS=yes               \\在这一行增加nis认证        
USEKERBEROS=no    
USESYSNETAUTH=no    
USEDB=no    
USEPASSWDQC=no    
[root@jedy yum.repos.d]#

3.[root@jedy ~]# more /etc/pam.d/system-auth
#%PAM-1.0    
# This file is auto-generated.    
# User changes will be destroyed the next time authconfig is run.    
auth        required      pam_env.so    
auth        sufficient    pam_unix.so nullok try_first_pass    
auth        requisite     pam_succeed_if.so uid >= 500 quiet    
auth        required      pam_deny.so

account     required      pam_unix.so  
account     sufficient    pam_localuser.so    
account     sufficient    pam_succeed_if.so uid < 500 quiet    
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3 type=  
password    sufficient    pam_unix.so sha512 shadow nis nullok try_first_pass use_authtok  \\在这一行增加nis 的pam认证    
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke  
session     required      pam_limits.so    
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid    
session     required      pam_unix.so    
[root@jedy yum.repos.d]#


4.[root@jedy ~]# more /etc/yp.conf
# /etc/yp.conf - ypbind configuration file    
# Valid entries are    
#    
# domain NISDOMAIN server HOSTNAME    
#       Use server HOSTNAME for the domain NISDOMAIN.    
#    
# domain NISDOMAIN broadcast    
#       Use  broadcast  on  the local net for domain NISDOMAIN    
#    
# domain NISDOMAIN slp    
#       Query local SLP server for ypserver supporting NISDOMAIN    
#    
# ypserver HOSTNAME    
#       Use server HOSTNAME for the  local  domain.  The    
#       IP-address of server must be listed in /etc/hosts.    
#    
# broadcast    
#       If no server for the default domain is specified or    
#       none of them is rechable, try a broadcast call to    
#       find a server.    
#    
domain test.com server nis.test.com       \\在这一行增加nis 的服务器和域名    
[root@jedy ~]#

5.重启相应的服务
[root@jedy ~]#    
[root@jedy ~]# service rpcbind restart    
Stopping rpcbind:                                          [FAILED]    
Starting rpcbind:                                          [  OK  ]    
[root@jedy yum.repos.d]# service  yppasswdd restart    
Stopping YP passwd service:                                [FAILED]    
Starting YP passwd service:                                [  OK  ]    
[root@jedy yum.repos.d]# service  ypbind restart    
Shutting down NIS service:                                 [  OK  ]    
Starting NIS service:                                      [  OK  ]    
Binding NIS service:                                       [  OK  ]    
[root@jedy yum.repos.d]#

6.开机启动相应的服务
[root@jedy yp]# chkconfig rpcbind on    
[root@jedy yp]# chkconfig ypbind on    
[root@jedy yp]# chkconfig yppasswdd on    
[root@jedy yp]# chkconfig ypserv on

第五：测试测试连接和认证

[root@jedy ~]#    
[root@jedy ~]# cat /etc/passwd    
#aa:x:500:500::/home/aa:/bin/bash    
bb:x:501:501::/home/bb:/bin/bash    
[root@jedy ~]#    
[root@jedy ~]# cd /var/yp/    
[root@jedy yp]# make    
gmake[1]: Entering directory `/var/yp/test.com'    
Updating passwd.byname...    
Updating passwd.byuid...    
Updating group.byname...    
Updating group.bygid...    
Updating hosts.byname...    
Updating hosts.byaddr...    
Updating netid.byname...    
gmake[1]: Leaving directory `/var/yp/test.com'    
[root@jedy yp]# su aa    
su: user aa does not exist    
[root@jedy yp]# su bb    
[bb@localhost yp]$ exit    
exit              
[root@jedy yp]# cat /etc/passwd                
#aa:x:500:500::/home/aa:/bin/bash    
#bb:x:501:501::/home/bb:/bin/bash    
[root@jedy yp]# ypcat -h localhost passwd.byname    
bb:!!:501:501::/home/bb:/bin/bash    
[root@jedy yp]# su aa    
su: user aa does not exist    
[root@jedy yp]# su bb    
[bb@localhost yp]$ exit    
exit    
[root@jedy yp]#

第六：补充
1.固定NIS端口
[root@jedy ~]# cat /etc/sysconfig/network    
NISDOMAIN=test.com    
HOSTNAME=localhost.localdomain    
NETWORKING=yes    
GATEWAY=*.*.*.*    
NSIDOMAIN=test.com    
YPSERV_ARGS="-p 800"            \\ypserv 端口    
YPXFRD_ARGS="-p 801"            \\ypserv 同步端口    
[root@jedy ~]#

至此 所有配置完成