xref: /netbsd-src/share/man/man8/nis.8 (revision 2d10124c7e22e4436e40caed7f21b9301f24a38c)
1*2d10124cSreed.\"	$NetBSD: nis.8,v 1.3 2009/10/24 12:21:31 reed Exp $
286640b9dSwiz.\"
386640b9dSwiz.\" Copyright (c) 1992/3 Theo de Raadt <deraadt@fsa.ca>
486640b9dSwiz.\" All rights reserved.
586640b9dSwiz.\" Portions Copyright (c) 1994 Jason R. Thorpe.  All rights reserved.
686640b9dSwiz.\"
786640b9dSwiz.\" Redistribution and use in source and binary forms, with or without
886640b9dSwiz.\" modification, are permitted provided that the following conditions
986640b9dSwiz.\" are met:
1086640b9dSwiz.\" 1. Redistributions of source code must retain the above copyright
1186640b9dSwiz.\"    notice, this list of conditions and the following disclaimer.
1286640b9dSwiz.\" 2. Redistributions in binary form must reproduce the above copyright
1386640b9dSwiz.\"    notice, this list of conditions and the following disclaimer in the
1486640b9dSwiz.\"    documentation and/or other materials provided with the distribution.
1586640b9dSwiz.\" 3. The name of the author may not be used to endorse or promote
1686640b9dSwiz.\"    products derived from this software without specific prior written
1786640b9dSwiz.\"    permission.
1886640b9dSwiz.\"
1986640b9dSwiz.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS
2086640b9dSwiz.\" OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
2186640b9dSwiz.\" WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2286640b9dSwiz.\" ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
2386640b9dSwiz.\" DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2486640b9dSwiz.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2586640b9dSwiz.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
2686640b9dSwiz.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
2786640b9dSwiz.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
2886640b9dSwiz.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
2986640b9dSwiz.\" SUCH DAMAGE.
3086640b9dSwiz.\"
3186640b9dSwiz.Dd February 26, 2005
3286640b9dSwiz.Dt NIS 8
3386640b9dSwiz.Os
3486640b9dSwiz.Sh NAME
3586640b9dSwiz.Nm nis ,
3686640b9dSwiz.Nm yp
3786640b9dSwiz.Nd description of the NIS (formerly YP) subsystem
3886640b9dSwiz.Sh SYNOPSIS
3986640b9dSwiz.Nm ypbind
4086640b9dSwiz.Op Fl ypset
4186640b9dSwiz.Nm ypbind
4286640b9dSwiz.Op Fl ypsetme
4386640b9dSwiz.Pp
4486640b9dSwiz.Nm ypset
4586640b9dSwiz.Op Fl h Ar host
4686640b9dSwiz.Op Fl d Ar domain
4786640b9dSwiz.Ar server
4886640b9dSwiz.Pp
4986640b9dSwiz.Nm yppoll
5086640b9dSwiz.Op Fl h Ar host
5186640b9dSwiz.Op Fl d Ar domain
5286640b9dSwiz.Ar mapname
5386640b9dSwiz.Pp
5486640b9dSwiz.Nm ypcat
5586640b9dSwiz.Op Fl kt
5686640b9dSwiz.Op Fl d Ar domainname
5786640b9dSwiz.Ar mapname
5886640b9dSwiz.Nm ypcat
5986640b9dSwiz.Fl x
6086640b9dSwiz.Pp
6186640b9dSwiz.Nm ypmatch
6286640b9dSwiz.Op Fl kt
6386640b9dSwiz.Op Fl d Ar domainname
6486640b9dSwiz.Ar key ... mapname
6586640b9dSwiz.Nm ypmatch
6686640b9dSwiz.Fl x
6786640b9dSwiz.Pp
6886640b9dSwiz.Nm ypwhich
6986640b9dSwiz.Op Fl d Ar domain
7086640b9dSwiz.Oo
7186640b9dSwiz.Op Fl t
7286640b9dSwiz.Fl m Op Ar mname
7386640b9dSwiz|
7486640b9dSwiz.Ar host
7586640b9dSwiz.Oc
7686640b9dSwiz.Nm ypwhich
7786640b9dSwiz.Fl x
7886640b9dSwiz.Pp
7986640b9dSwiz.Nm ypserv
8086640b9dSwiz.Op Fl d
8186640b9dSwiz.Op Fl x
8286640b9dSwiz.Pp
8386640b9dSwiz.Nm yppush
8486640b9dSwiz.Op Fl d Ar domainname
8586640b9dSwiz.Op Fl h Ar hostname
8686640b9dSwiz.Op Fl v
8786640b9dSwiz.Ar mapname
8886640b9dSwiz.Pp
8986640b9dSwiz.Nm ypxfr
9086640b9dSwiz.Op Fl bcf
9186640b9dSwiz.Op Fl d Ar domain
9286640b9dSwiz.Op Fl h Ar host
9386640b9dSwiz.Op Fl s Ar domain
9486640b9dSwiz.Op Fl C Ar tid prog ipadd port
9586640b9dSwiz.Ar mapname
9686640b9dSwiz.Pp
9786640b9dSwiz.Nm ypinit
9886640b9dSwiz.Fl m
9986640b9dSwiz.Op Ar domainname
10086640b9dSwiz.Nm ypinit
10186640b9dSwiz.Fl s
10286640b9dSwiz.Ar master_server
10386640b9dSwiz.Op Ar domainname
10486640b9dSwiz.Pp
10586640b9dSwiz.Nm yptest
10686640b9dSwiz.Pp
10786640b9dSwiz.Nm rpc.yppasswdd
108c432982bSthorpej.Op Fl noshell
109c432982bSthorpej.Op Fl nogecos
110c432982bSthorpej.Op Fl nopw
11186640b9dSwiz.Op Fl m Ar arg1 arg2 ...
11286640b9dSwiz.Sh DESCRIPTION
11386640b9dSwizThe
11486640b9dSwiz.Tn NIS
11586640b9dSwizsubsystem allows network management of passwd and group file
11686640b9dSwizentries through the functions
11786640b9dSwiz.Xr getpwent 3
11886640b9dSwizand
11986640b9dSwiz.Xr getgrent 3 .
12086640b9dSwiz.Tn NIS
12186640b9dSwizalso provides hooks for other client programs, such as
12286640b9dSwiz.Xr amd 8
12386640b9dSwizand
124*2d10124cSreed.Xr rpc.bootparamd 8 ,
12586640b9dSwizthat can use
12686640b9dSwiz.Tn NIS
12786640b9dSwizmaps.
12886640b9dSwiz.Pp
12986640b9dSwizPassword maps in standard YP are insecure, because the pw_passwd
13086640b9dSwizfield is accessible by any user. A common solution to this is to
13186640b9dSwizgenerate a secure map (using
13286640b9dSwiz.Dq makedbm -s )
13386640b9dSwizwhich can only be accessed by a client bound to a privileged port.
13486640b9dSwizTo activate the secure map, see the appropriate comment in
13586640b9dSwiz.Pa /var/yp/Makefile.yp .
13686640b9dSwiz.Pp
13786640b9dSwizThe
13886640b9dSwiz.Tn NIS
13986640b9dSwizsubsystem is conditionally started in
14086640b9dSwiz.Pa /etc/rc .
14186640b9dSwizSee the
14286640b9dSwiz.Pa /etc/rc.conf
14386640b9dSwizfile for configuration variables.
14486640b9dSwiz.Sh SEE ALSO
14586640b9dSwiz.Xr domainname 1 ,
14686640b9dSwiz.Xr ypcat 1 ,
14786640b9dSwiz.Xr ypmatch 1 ,
14886640b9dSwiz.Xr ypwhich 1 ,
14986640b9dSwiz.Xr ypclnt 3 ,
15086640b9dSwiz.Xr group 5 ,
15186640b9dSwiz.Xr hosts_access 5 ,
15286640b9dSwiz.Xr nsswitch.conf 5 ,
15386640b9dSwiz.Xr passwd 5 ,
15486640b9dSwiz.Xr rc.conf 5 ,
15586640b9dSwiz.Xr rc 8 ,
15686640b9dSwiz.Xr ypbind 8 ,
15786640b9dSwiz.Xr ypinit 8 ,
15886640b9dSwiz.Xr yppoll 8 ,
15986640b9dSwiz.Xr yppush 8 ,
16086640b9dSwiz.Xr ypserv 8 ,
16186640b9dSwiz.Xr ypset 8 ,
16286640b9dSwiz.Xr yptest 8 ,
16386640b9dSwiz.Xr ypxfr 8
16486640b9dSwiz.Sh HISTORY
16586640b9dSwizThe
16686640b9dSwiz.Tn NIS
16786640b9dSwizclient subsystem was originally written by Theo de Raadt
16886640b9dSwizto be compatible with Sun's implementation.  The
16986640b9dSwiz.Tn NIS
17086640b9dSwizserver suite was originally written by Mats O Jansson.
17186640b9dSwiz.Sh BUGS
17286640b9dSwizIf
17386640b9dSwiz.Xr ypbind 8
17486640b9dSwizcannot find a server, the system behaves the same way as Sun's code:
17586640b9dSwizit hangs.
17686640b9dSwiz.Pp
17786640b9dSwizThe
17886640b9dSwiz.Sq secure map
17986640b9dSwizfeature is not compatible with non-BSD implementations as found
18086640b9dSwize.g. in Solaris.
181