Naming and Directory Services (DNS, NIS, and LDAP)

In addition, if audit_user, auth_attr, exec_attr and prof_attr aretobetaken from a directory other than the default, you must amend the RBACDIR=/etc/security to RBACDIR=/your-choice.Passwd Files and Namespace SecurityThe passwd map is a special case. In addition to the old Solaris 1 passwd file format,this implementation of NIS accepts the /etc/passwd and /etc/shadow file formatsas input for building the NIS password maps.For security reasons, the files used to build the NIS password maps should not containan entry for root, to prevent unauthorized root access. Therefore, the password mapsshould not be built from the files located in the master server’s /etc directory. Thepassword files used to build the password maps should have the root entry removedfrom them and be located in a directory that can be protected from unauthorizedaccess.For example, the master server password input files should be stored in a directorysuch as /var/yp, or any directory of your choice, as long as the file itself is not a linkto another file and its location is specified in the Makefile. The correct directoryoption is set automatically according to the configuration specified in your Makefile.Caution – Be sure that the passwd file in the directory specified by PWDDIR does notcontain an entry for root.If your source files are in a directory other than /etc, you must alter the PWDIRpassword macro in the Makefile to refer to the directory where the passwd andshadow files reside, changing the line PWDIR=/etc to PWDIR/your-choice, whereyour-choice is the name of the directory you will be using to store the passwd mapsource files.Preparing Source Files for Conversion to NIS MapsPrepare the source files for conversion to NIS maps.▼How to Prepare Source Files for Conversion1. Become superuser or assume an equivalent role.Roles contain authorizations and privileged commands. For more informationabout roles, see “Using Role-Based Access Control (Tasks)” in System AdministrationGuide: Security Services.Chapter 5 • Setting Up and Configuring NIS Service 83