Naming and Directory Services (DNS, NIS, and LDAP)

NIS+ Entry Owner, Group, Access, andTTLWhen NIS+ table entries are created from LDAP data, the default behavior is toinitialize the entry object owner, group, access rights, and TTL using thecorresponding values from the table object in which the entry object lives. This isnormally sufficient, but there might be cases where these NIS+ entry attributes mustbe established individually. An example of this would be a site that did not use therpc.nispasswdd(1M) daemon. In order to allow individual users to change theirNIS+ passwords (and re-encrypt their Diffie-Hellman keys stored in thecred.org_dir table), passwd.org_dir and cred.org_dir entries for the usershould be owned by the user, and have modify rights for the entry owner.If you need to store table entry owner, group, access, or TTL in LDAP for one or moreNIS+ tables, you need to do the following.▼How to Store Additional Entry Attributes in LDAP1. Consult your LDAP server documentation, and create the following newattributes and object class. (LDIF data is suitable for ldapadd. Attribute andobject class OIDs are for illustration only.)dn: cn=schemachangetype: modifyadd: attributetypesattributetypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.4.0 NAME ’nisplusEntryOwner’ \DESC ’Opaque representation of NIS+ entry owner’ \SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )attributetypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.4.1 NAME ’nisplusEntryGroup’ \DESC ’Opaque representation of NIS+ entry group’ \SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )attributetypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.4.2 NAME ’nisplusEntryAccess’ \DESC ’Opaque representation of NIS+ entry access’ \SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )attributetypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.4.3 NAME ’nisplusEntryTtl’ \DESC ’Opaque representation of NIS+ entry TTL’ \SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )dn: cn=schemachangetype: modifyadd: objectclassesobjectclasses:(1.3.6.1.4.1.42.2.27.5.42.42.5.0 NAME ’nisplusEntryData’\SUP top STRUCTURAL DESC ’NIS+ entry object non-column data’\MUST ( cn ) MAY ( nisplusEntryOwner $ nisplusEntryGroup $\nisplusEntryAccess $ nisplusEntryTtl ) )Chapter 16 • Transitioning From NIS+ to LDAP 275