1.\" $NetBSD: nis.8,v 1.3 2009/10/24 12:21:31 reed Exp $ 2.\" 3.\" Copyright (c) 1992/3 Theo de Raadt <deraadt@fsa.ca> 4.\" All rights reserved. 5.\" Portions Copyright (c) 1994 Jason R. Thorpe. All rights reserved. 6.\" 7.\" Redistribution and use in source and binary forms, with or without 8.\" modification, are permitted provided that the following conditions 9.\" are met: 10.\" 1. Redistributions of source code must retain the above copyright 11.\" notice, this list of conditions and the following disclaimer. 12.\" 2. Redistributions in binary form must reproduce the above copyright 13.\" notice, this list of conditions and the following disclaimer in the 14.\" documentation and/or other materials provided with the distribution. 15.\" 3. The name of the author may not be used to endorse or promote 16.\" products derived from this software without specific prior written 17.\" permission. 18.\" 19.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS 20.\" OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 21.\" WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 22.\" ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY 23.\" DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29.\" SUCH DAMAGE. 30.\" 31.Dd February 26, 2005 32.Dt NIS 8 33.Os 34.Sh NAME 35.Nm nis , 36.Nm yp 37.Nd description of the NIS (formerly YP) subsystem 38.Sh SYNOPSIS 39.Nm ypbind 40.Op Fl ypset 41.Nm ypbind 42.Op Fl ypsetme 43.Pp 44.Nm ypset 45.Op Fl h Ar host 46.Op Fl d Ar domain 47.Ar server 48.Pp 49.Nm yppoll 50.Op Fl h Ar host 51.Op Fl d Ar domain 52.Ar mapname 53.Pp 54.Nm ypcat 55.Op Fl kt 56.Op Fl d Ar domainname 57.Ar mapname 58.Nm ypcat 59.Fl x 60.Pp 61.Nm ypmatch 62.Op Fl kt 63.Op Fl d Ar domainname 64.Ar key ... mapname 65.Nm ypmatch 66.Fl x 67.Pp 68.Nm ypwhich 69.Op Fl d Ar domain 70.Oo 71.Op Fl t 72.Fl m Op Ar mname 73| 74.Ar host 75.Oc 76.Nm ypwhich 77.Fl x 78.Pp 79.Nm ypserv 80.Op Fl d 81.Op Fl x 82.Pp 83.Nm yppush 84.Op Fl d Ar domainname 85.Op Fl h Ar hostname 86.Op Fl v 87.Ar mapname 88.Pp 89.Nm ypxfr 90.Op Fl bcf 91.Op Fl d Ar domain 92.Op Fl h Ar host 93.Op Fl s Ar domain 94.Op Fl C Ar tid prog ipadd port 95.Ar mapname 96.Pp 97.Nm ypinit 98.Fl m 99.Op Ar domainname 100.Nm ypinit 101.Fl s 102.Ar master_server 103.Op Ar domainname 104.Pp 105.Nm yptest 106.Pp 107.Nm rpc.yppasswdd 108.Op Fl noshell 109.Op Fl nogecos 110.Op Fl nopw 111.Op Fl m Ar arg1 arg2 ... 112.Sh DESCRIPTION 113The 114.Tn NIS 115subsystem allows network management of passwd and group file 116entries through the functions 117.Xr getpwent 3 118and 119.Xr getgrent 3 . 120.Tn NIS 121also provides hooks for other client programs, such as 122.Xr amd 8 123and 124.Xr rpc.bootparamd 8 , 125that can use 126.Tn NIS 127maps. 128.Pp 129Password maps in standard YP are insecure, because the pw_passwd 130field is accessible by any user. A common solution to this is to 131generate a secure map (using 132.Dq makedbm -s ) 133which can only be accessed by a client bound to a privileged port. 134To activate the secure map, see the appropriate comment in 135.Pa /var/yp/Makefile.yp . 136.Pp 137The 138.Tn NIS 139subsystem is conditionally started in 140.Pa /etc/rc . 141See the 142.Pa /etc/rc.conf 143file for configuration variables. 144.Sh SEE ALSO 145.Xr domainname 1 , 146.Xr ypcat 1 , 147.Xr ypmatch 1 , 148.Xr ypwhich 1 , 149.Xr ypclnt 3 , 150.Xr group 5 , 151.Xr hosts_access 5 , 152.Xr nsswitch.conf 5 , 153.Xr passwd 5 , 154.Xr rc.conf 5 , 155.Xr rc 8 , 156.Xr ypbind 8 , 157.Xr ypinit 8 , 158.Xr yppoll 8 , 159.Xr yppush 8 , 160.Xr ypserv 8 , 161.Xr ypset 8 , 162.Xr yptest 8 , 163.Xr ypxfr 8 164.Sh HISTORY 165The 166.Tn NIS 167client subsystem was originally written by Theo de Raadt 168to be compatible with Sun's implementation. The 169.Tn NIS 170server suite was originally written by Mats O Jansson. 171.Sh BUGS 172If 173.Xr ypbind 8 174cannot find a server, the system behaves the same way as Sun's code: 175it hangs. 176.Pp 177The 178.Sq secure map 179feature is not compatible with non-BSD implementations as found 180e.g. in Solaris. 181