How to Install and Configure the QAS NIS Components on Solaris (4250742)

How to Install and Configure the QAS NIS Components on Solaris

Installing and Configuring the QAS NIS Client Components on Solaris

To ensure that the NIS proxy agent daemon, vasypd, does not cause any system hangs when you install, configure, or upgrade it, follow the steps for each supported Solaris platform outlined in this section.

Note: Before installing and configuring the QAS NIS components, you should have previously installedthe QAS agent software and joined the Unix machine to an Active Directory domain.

You can find the vasyp .pkg file in the client directory for your Solaris operating system on the installation media.

1. Stop the system ypserv and ypbind daemons by running the following commands as root:

a) For Solaris 8 and 9, run:

# /etc/init.d/rpc stop

To ensure that the system ypserv daemon does not start at boot time, make sure that the following directory does not exist:

/var/yp/$domainname
where $domainname matches the NIS domain returned by domainname.

Note: You do not need to do this if the machine is not configured as a NIS server.

b) For Solaris 10 (or greater), run:

To stop ypbind run:

# /usr/lib/netsvc/yp/ypstop

To stop vasypd run:

# svcadm disable vasypd

To stop ypserv run: 

# svcadm disable network/nis/server

Note: When installing the Authentication Services vasypd Unix component on Solaris 10 (or greater), you must have the rpcbind service enabled on the host for this service to start. To enable it, run this command:

# /usr/sbin/svcadm enable -s network/rpc/bind

2. As root, mount the installation CD, change to the solaris directory, and run the following command:

# pkgadd -d vasyp_SunOS_<platform>-<version>.pkg all

3. Create the /var/yp/binding/example.com directory where example.com is the Active Directory domain to which you are joined.

4. Create the /var/yp/binding/example.com/ypservers file and add the following line or modify the existing file to only contain this line:

localhost

5. Set the system NIS domain name to match the Active Directory domain to which you are joined by running the following command as root:

# domainname example.com

where example.com is the domain to which your machine has been joined.
Note: This only sets your NIS domain name for the current environment.

6. Set the NIS domain name permanently by modifying /etc/defaultdomain to include only the following line:

example.com

where example.com is the Active Directory domain to which you are joined.

7. Start vasyp with the following command:

# /etc/init.d/vasypd start

8. Start ypbind with the following command:

a) For Solaris 8 and 9, run:

# /etc/init.d/rpc start

b) For Solaris 10 (or greater), run:

# /usr/lib/netsvc/yp/ypstart

Note: For Solaris 10 (or greater), ypbind may not bind to vasyp until some actual NIS requests occur which can take up to 30 seconds.

You can now use the NIS utilities like ypwhich and ypcat to query vasyp for NIS map data