Centos8搭建配置nis域服务详细步骤

目录NIS 简介网络环境：1.环境准备(两个节点都要)2.nis主服务器配置3.nis客户端设置 

NIS 简介

NIS，英文的全称是network information service，也叫yellow pages。在Linux中，NIS是一个基于RPC的client/server系统，需要使用 RPC 服务。

RPC即Remote Procedure Call Protocol（远程过程调用协议），RPCBIND用于取代旧版本中的portmap组件。简单说，RPCBIND就是为了将不同服务与对应的端口进行绑定，以便支持机器间的相互操作。

网络环境：

节点 主机 node1(nis主服务器) 192.168.10.222 node2(nis客户机) 192.168.10.223

1.环境准备(两个节点都要)

关闭防火墙

systemctl stop firewalld setenforce 0

添加主机名解析

vim /etc/hosts 192.168.10.222 node1 192.168.10.223 node2

2.nis主服务器配置

 下载软件包

yum -y install rpcbind ypserv ypbind yp-tools

添加nis域名

[root@localhost ~]# nisdomainname skills.com vim /etc/sysconfig/network NISDOMAIN skills.com

开机自动挂载nis域名

[root@localhost ~]# vim /etc/rc.d/rc.local touch /var/lock/subsys/local /bin/nisdomainname skills.com [root@localhost ~]# chmod 777 /etc/rc.d/rc.local

修改主配置文件限制权限

vim /etc/ypserv.conf 192.168.10.0/24:*:*:none //给与该网段访问权限 192.168.10.222:*:*:none //给与该本机访问权限 :*:*:deny //拒绝其他服务器

重启服务

systemctl restart yppasswdd rpcbind ypserv systemctl enable yppasswdd rpcbind ypserv

建立资料库

[root@localhost ~]# /usr/lib64/yp/ypinit -m At this point, we have to construct a list of the hosts which will run NIS servers. localhost is in the list of NIS server hosts. Please continue to add the names for the other hosts, one per line. When you are done with the list, type a <control D>. next host to add: localhost next host to add: The current list of NIS servers looks like this: localhost Is this correct? [y/n: y] y We need a few minutes to build the databases… Building /var/yp/skills.com/ypservers… Running /var/yp/Makefile… gmake[1]: Entering directory /var/yp/skills.com Updating passwd.byname… Updating passwd.byuid… Updating group.byname… Updating group.bygid… Updating hosts.byname… Updating hosts.byaddr… Updating rpc.byname… Updating rpc.bynumber… Updating services.byname… Updating services.byservicename… Updating netid.byname… Updating protocols.bynumber… Updating protocols.byname… Updating mail.aliases… gmake[1]: Leaving directory /var/yp/skills.com localhost has been set up as a NIS master server. Now you can run ypinit -s localhost on all slave server. [root@localhost ~]#

新建nis账户

useradd nis1 -p123 useradd nis2 -p123 当主机发生了更改就cd到/var/yp make [root@localhost ~]# cd /var/yp/ [root@localhost yp]# make gmake[1]: Entering directory /var/yp/skills.com Updating passwd.byname… Updating passwd.byuid… Updating group.byname… Updating group.bygid… Updating netid.byname… gmake[1]: Leaving directory /var/yp/skills.com [root@localhost yp]#

重启服务

systemctl restart yppasswdd rpcbind ypserv systemctl enable yppasswdd rpcbind ypserv

3.nis客户端设置 

 下载软件包

yum -y install ypbind rpcbind yp-tools

添加nis域名

[root@localhost ~]# nisdomainname skills.com vim /etc/sysconfig/network NISDOMAIN skills.com

开机自动挂载nis域名

[root@localhost ~]# vim /etc/rc.d/rc.local touch /var/lock/subsys/local /bin/nisdomainname skills.com [root@localhost ~]# chmod 777 /etc/rc.d/rc.local

编辑yp.conf文件，设置主服务。 

domain skills.com server 192.168.10.222

重启服务

systemctl restart ypbind rpcbind

 yptest查看是否加入成功

[root@localhost ~]# yptest Test 1: domainname Configured domainname is “skills.com” Test 2: ypbind Use Protocol V1: Used NIS server: 192.168.10.222 Use Protocol V2: Used NIS server: 192.168.10.222 Use Protocol V3: ypbind_nconf: nc_netid: udp nc_semantics: 1 nc_flag: 1 nc_protofmly: inet nc_proto: udp nc_device: – nc_nlookups: 0 ypbind_svcaddr: 192.168.10.222:740 ypbind_servername: 192.168.10.222 ypbind_hi_vers: 2 ypbind_lo_vers: 2 Test 3: yp_match WARNING: No such key in map (Map passwd.byname, key nobody) Test 4: yp_first nis1 nis1:123:1000:1000::/home/nis1:/bin/bash Test 5: yp_next nis2 nis2:123:1001:1001::/home/nis2:/bin/bash Test 6: yp_master localhost Test 7: yp_order 1639387530 Test 8: yp_maplist netid.byname group.bygid group.byname passwd.byuid passwd.byname mail.aliases protocols.byname protocols.bynumber services.byservicename services.byname rpc.bynumber rpc.byname hosts.byaddr hosts.byname ypservers Test 9: yp_all nis1 nis1:123:1000:1000::/home/nis1:/bin/bash nis2 nis2:123:1001:1001::/home/nis2:/bin/bash 1 tests failed [root@localhost ~]#

配置域用户登陆

[root@localhost ~]# authselect select nis –force Backup stored at /var/lib/authselect/backups/2021-12-13-09-34-52.8NFKZD Profile “nis” was selected. The following nsswitch maps are overwritten by the profile: – aliases – automount – ethers – group – hosts – initgroups – netgroup – networks – passwd – protocols – publickey – rpc – services – shadow Make sure that NIS service is configured and enabled. See NIS documentation for more information. [root@localhost ~]#

主服务器配置nfs，将home目录共享。

[root@localhost yp]# vim /etx/exports /home/ *(rw,sync) [root@localhost yp]# exportfs -rv exporting *:/home

客户端挂载主服务器home目录

systemctl restart nfs-server [root@localhost ~]# mount 192.168.10.222:/home/ /home/ [root@localhost ~]# df Filesystem 1K-blocks Used Available Use% Mounted on devtmpfs 379852 0 379852 0% /dev tmpfs 399816 0 399816 0% /dev/shm tmpfs 399816 5688 394128 2% /run tmpfs 399816 0 399816 0% /sys/fs/cgroup /dev/mapper/cl-root 17811456 1615988 16195468 10% / /dev/sda1 1038336 196688 841648 19% /boot /dev/sr0 9046654 9046654 0 100% /media tmpfs 79960 0 79960 0% /run/user/0 192.168.10.222:/home 17811456 1644672 16166784 10% /home [root@localhost ~]#

添加开机自动挂载主服务home目录。

vim /etc/fstab 192.168.10.222:/home /home nfs defaults 0 0 [root@localhost ~]# mount -a [root@localhost ~]# df Filesystem 1K-blocks Used Available Use% Mounted on devtmpfs 379852 0 379852 0% /dev tmpfs 399816 0 399816 0% /dev/shm tmpfs 399816 5688 394128 2% /run tmpfs 399816 0 399816 0% /sys/fs/cgroup /dev/mapper/cl-root 17811456 1613680 16197776 10% / /dev/sda1 1038336 196688 841648 19% /boot /dev/sr0 9046654 9046654 0 100% /media 192.168.10.222:/home 17811456 1644544 16166912 10% /home tmpfs 79960 0 79960 0% /run/user/0 [root@localhost ~]#

到这nis配置完成。