Naming and Directory Services (DNS, NIS, and LDAP)

Set the owner of the link object to an appropriate principal in thesub.dom.ain. as follows.# nischown trusted.sub.dom.ain. credname.sub.dom.ain.Edit the mapping file. Change(nis+:zo_owner[]cred.org_dir, "*.%s")), \to(nis+:zo_owner[]credname.sub.dom.ain., "*.%s")), \■■Note that the use of a link object called credname is an example. Any validobject type (except an entry object) and object name will do. The importantpoint is to set the owner of the object to have the correct domain name.If you do not want to give ownership even of a special purpose object to aprincipal from the domain used for the principal and netnames, createnisplusPrincipalName and nisplusNetname attributes as detailed below.The cred.org_dir table contains principal and netnames belonging to more than onedomain.Consult the documentation for your LDAP server, and create thenisplusPrincipalName and nisplusNetname attributes, as well as thenisplusAuthName object class. (The following is LDIF data for ldapadd.Attribute and object class OIDs are for illustration only.)dn: cn=schemachangetype: modifyadd: attributetypesattributetypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.7.0 NAME ’nisplusPrincipalName’ \DESC ’NIS+ principal name’ \SINGLE-VALUE \SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )attributetypes: ( 1.3.6.1.4.1.42.2.27.5.42.42.9.0 NAME ’nisplusNetname’ \DESC ’Secure RPC netname’ \SINGLE-VALUE \SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )dn: cn=schemachangetype: modifyadd: objectclassesobjectclasses: ( 1.3.6.1.4.1.42.2.27.5.42.42.10.0 NAME ’nisplusAuthName’ \SUP top AUXILLIARY DESC ’NIS+ authentication identifiers’ \MAY ( nisplusPrincipalName $ nisplusNetname ) )You now need to enable the cred.org_dir mapping to use the newly creatednisplusNetname and nisplusPrincipalName attributes. The templatemapping file, /var/nis/NIS+LDAPmapping.template, containscommented-out lines for this purpose. See the nisplusObjectDN andnisplusLDAPattributeFromColumn/ nisplusLDAPcolumnFromAttributeattribute values for the credlocal, creduser, and crednode database IDs.Chapter 16 • Transitioning From NIS+ to LDAP 279