Chat now with support
Chat with Support

Safeguard Authentication Services 6.1 - Administration Guide

Privileged Access Suite for UNIX Introducing One Identity Safeguard Authentication Services UNIX administration and configuration Identity management Migrating from NIS Managing access control Managing local file permissions Certificate Autoenrollment Integrating with other applications Managing UNIX hosts with Group Policy
Safeguard Authentication Services Group Policy
Group Policy Concepts UNIX policies One Identity policies
Display specifiers Troubleshooting Glossary

Installing and configuring the Linux NIS client components

You can find the vasyp.rpm file in the client directory for your Linux operating system on the installation media.

To install and configure vasyp on Linux

  1. Ensure that the system ypserv daemon is stopped by running the following as root:

    # /etc/init.d/ypserv stop
or, if systemd is available, use:
systemctl stop ypserv

    NOTE: Consider the following about stopping the ypserv daemon:

    • You do not need to perform this step if you do not have ypserv configured.

    • This option is not available on SUSE Linux (11 or later) and on Red Hat.

  2. Ensure that the system ypserv daemon is not configured to start at system boot time.

    The commands for doing this vary for the different supported Linux distributions. See your operating system documentation for instructions on disabling system services.

  3. Ensure that the system ypbind daemon is not running by entering the following command:

    # /etc/init.d/ypbind stop
or, if systemd is available, use:
systemctl stop ypbind

  4. Ensure that the system ypbind daemon is configured to start at system boot time.

    The commands for doing this vary for the different supported Linux distributions. See your operating system documentation for instructions on enabling system services.

  5. As root, mount the Safeguard Authentication Services installation CD, change directories into the linux directory, and run the following command:

    # rpm -Uvh vasyp-<version>.<build number>.rpm

    As part of the install process, vasyp is registered with chkconfig to start at system boot time.

  6. Configure the ypbind daemon to only talk to NIS servers on the local network interface by modifying /etc/yp.conf to contain only the following entry:

    ypserver localhost

    You can use either localhost or the actual hostname.

  7. Set the system NIS domain name to match the Active Directory domain to which you are joined by running the following command as root:

    # domainname example.com

    where example.com is the domain to which your machine has been joined.

    Set the NIS domain name permanently on Red Hat Linux by modifying /etc/sysconfig/network to have the following option:

    NIS_DOMAIN="example.com"

    where example.com is the Active Directory domain to which the machine is joined.

    On SUSE Linux, modify the /etc/defaultdomain file to include only example.com where example.com is the Active Directory domain to which you are joined.

  8. Start vasyp with the following command:

    vastool daemon start vasypd

  9. Start ypbind with the following command:

    # /etc/init.d/ypbind start
or, if systemd is available, use:
systemctl start ypbind

    You can now use the NIS utilities like ypwhich and ypcat to query vasyp for NIS map data.

Installing and configuring the Oracle Solaris NIS client components

You can find the vasyp.pkg file in the client directory for your Oracle Solaris operating system on the installation media.

To install and configure vasyp on Oracle Solaris

  1. Stop the system ypserv and ypbind daemons by running the following commands as root:

    1. Stop ypbind

      # svcadm disable nis/client

    2. Stop vasypd

      # svcadm disable vasypd

    3. Stop ypserv

      # svcadm disable network/nis/server

      NOTE: When installing the Safeguard Authentication Services vasypd UNIX component on Oracle Solaris 10 (or later), you must have the rpcbind service enabled on the host for this service to start. To enable it, run this command:

      # /usr/sbin/svcadm enable -s network/rpc/bind

  2. As root, mount the installation CD, change to the solaris directory, and run the following command:

    # pkgadd -d vasyp_SunOS_<platform>-<version>.pkg all
  3. Create the /var/yp/binding/example.com directory where example.com is the Active Directory domain to which you are joined.

  4. Create the /var/yp/binding/example.com/ypservers file and add the following line or modify the existing file to only contain this line:

    localhost

  5. Set the system NIS domain name to match the Active Directory domain to which you are joined by running the following command as root:

    # domainname example.com

    where example.com is the domain to which your machine has been joined.

    NOTE: This only sets your NIS domain name for the current environment.

  6. Set the NIS domain name permanently by modifying /etc/defaultdomain to include only the following line:

    example.com

    where example.com is the Active Directory domain to which you are joined.

  7. Start vasyp with the following command:

    # /etc/init.d/vasypd start

  8. Start ypbind with the following command:

    # svcadm enable nis/client

You can now use the NIS utilities like ypwhich and ypcat to query vasyp for NIS map data.

NOTE: For Oracle Solaris 10 (or later), ypbind may not bind to vasyp until some actual NIS requests occur which can take up to 30 seconds.

Installing and configuring the HP-UX NIS client components

You can find the vasyp.depot file in the client directory for your HPUX operating system on the installation media.

To install and configure vasyp on HP-UX

  1. Stop the system ypserv and ypbind daemons by running the following commands as root:

    # /sbin/init.d/nis.server stop
					# /sbin/init.d/nis.client stop

    To ensure that the system ypserv daemon does not start at boot time, modify /etc/rc.config.d/namesvrs and set the NIS_MASTER_SERVER and NIS_SLAVE_SERVER variables to 0.

    NOTE: You do not need to do this if the machine is not configured as a NIS server.

  2. As root, mount the Safeguard Authentication Services installation CD and change to the hpux directory.

  3. To install the depot on an HP-UX client, enter the following command:

    # swinstall -s /cdrom/hpux-<platform>/vasyp_<platform>-<version>.depot vasyp

  4. Create the /var/yp/binding/example.com directory where example.com is the Active Directory domain to which you are joined.

  5. Create the /var/yp/binding/example.com/ypservers file, and add the following line, or modify the existing file to only contain this line:

    localhost

  6. Set the system NIS domain name to match the Active Directory domain to which you are joined by running the following command as root:

    # domainname example.com

    where example.com is the domain to which your machine has been joined.

  7. Set the NIS domain name permanently by modifying /etc/rc.config.d/namesvrs so that the NIS_DOMAIN variable is set to the Active Directory domain to which the UNIX machine is joined.

  8. To ensure that the system NIS client processes starts at boot time, set the NIS_CLIENT variable in /etc/rc.config.d/namesvrs to 1.

  9. Start vasyp with the following command:

    # /sbin/init.d/vasypd start

  10. (Optional) Start ypbind with the following command:

    # /sbin/init.d/nis.client start

    You can now use the NIS utilities like ypwhich and ypcat to query vasyp for NIS map data.

Installing and configuring the AIX NIS client components

You can find the vasyp.bff file in the client directory for your AIX operating system on the installation media.

To install and configure vasyp on AIX

  1. Ensure that the system ypserv and ypbind daemons are stopped by running the following commands as root:

    # stopsrc -s ypbind 
# stopsrc -s ypserv

    Also ensure that all entries dealing with ypserv and ypbind in /etc/rc.nfs are commented out.

    NOTE: You do not need to do this if the machine is not configured as a NIS server.

  2. As root, mount the Safeguard Authentication Services installation CD and change to the aix directory.

  3. Use installp to install the package appropriate for your version of AIX, as follows:

    # installp -ac -d vasyp_AIX_<platform>.<version>.bff all

  4. On AIX 7.1 (and later), create a ypservers file in /var/yp/binding/<NIS_DOMAIN>/ypservers which only contains the following line:

    127.0.0.1

  5. Start vasyp with the following command:

    # /etc/rc.d/init.d/vasypd start

    NOTE: Do not configure the NIS client using the standard AIX configuration instructions. Normally, you configure the system domain name and enable the NIS client in /etc/rc.nfs. For vasyp to work correctly on AIX, you must disable any NIS configuration in the /etc/rc.nfs file.

    You can now use the NIS utilities like ypwhich and ypcat to query vasyp for NIS map data.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating