Naming and Directory Services (DNS, NIS, and LDAP)

■The files used to build the NIS password maps should not contain an entry forroot to protect against unauthorized access. To accomplish this, the password filesused to build the password maps should have the root entry removed from themand be located in a directory other than the master server’s /etc directory. Thisdirectory should be secured against unauthorized access.For example, the master server password input files could be stored in a directorysuch as /var/yp, or any directory of your choice, as long as the file itself is not a linkto another file and is specified in the Makefile. When you use either the ServiceManagement Facility or the ypstart script to start the NIS service, the correctdirectory option is set according to the configuration specified in your Makefile.Note – In addition to the older Solaris 1 version passwd file format, thisimplementation of NIS accepts the Solaris 2 passwd and shadow file formats as inputfor building the NIS password maps.Administering NIS UsersThis section includes information about setting user passwords, adding new users toan NIS domain, and assigning users to netgroups.▼How to Add a New NIS User to an NIS Domain1. On the master NIS server, become superuser or assume an equivalent role.Roles contain authorizations and privileged commands. For more informationabout roles, see “Using Role-Based Access Control (Tasks)” in System AdministrationGuide: Security Services.2. Create the new user’s login ID with the useradd command.# useradd userIDuserID is the login ID of the new user. This command creates entries in the/etc/passwd and /etc/shadow files on the master NIS server.3. Create the new user’s initial password.To create an initial password that the new user can use to log in, run the passwdcommand.# passwd userIDWhere userID is the login ID of the new user. You will be prompted for thepassword to assign to this user.94 System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP) • January 2005