Steps to configure a 5210/5310 for a NIS+ environment

Asset ID:	1-71-1002404.1
Update Date:	2009-09-23
Keywords:

Solution Type Technical Instruction Sure

Solution 1002404.1 : Steps to configure a 5210/5310 for a NIS+ environment

Related Items


Sun Storage 5210 NAS Appliance
 Sun Storage 5310 NAS Appliance

Related Categories


GCS>Sun Microsystems>Storage - Disk>Network Attached Storage

PreviouslyPublishedAs
203366

Description
The following steps are required to configure a 5210 or 5310 NAS device to participate in a NIS+ environment

Steps to Follow

This document assumes that there is an existing functional NIS+ domain and
that the user performing the tasks has the ability to make changes on the NIS+ home domain server.
Step 1: Manually add credentials for the 5210 or 5310 NAS to the home domain
servers credentials file. The nisaddcred command is used to
perform this action.
a) At the NIS+ home domain server, log in as root
b) Enter the following command:
# nisaddcred -p unix.<hostname>@domain-name -P <hostname>.domain-name. des
-- <hostname> is the name of the 5310
-- domain-name is the NIS+ domain the 5310 is joining.
-- Do not forget the trailing "." in the -P <hostname>.domain-name.
c) Once the above is entered, you are prompted for a password
(not necessarily the root password) it is this password that is
later used for the Secure RPC Password, enter the password,
and make note of it - the credentials are now created
Example:
To add a 5310 with the hostname "5310" to the "sales.example.com" NIS+ domain:
# nisaddcred -p unix.5310@sales.example.com -P 5310.sales.example.com. des
Step 2: Configuring NIS+ on the 5210 or 5310 NAS
a) Using the web browser, connect to the 5310
b) Make the following selections:
"Unix Configuration" --> "Set Up NIS+"
c) On the resulting input screen configure the following:
Check "Enable NIS+"
Home Domain Server: IP address of the NIS+ server
NIS+ domain: NIS+ domain with a period on the end
Secure RPC Password: Password used when performing the
nisaddcred from above
Search Path: leave it blank
Use Broadcast - not checked
d) Click the "Apply" button to save changes
Step 3: Configuring Name Services on the 5210 or 5310
b) Make the following selections:
"Unix Configuration" --> "Configure Name Services"
c) On the resulting input screen configure the name service
look-up order for the following:
User Order
Groups Order
Netgroups Order
Hosts Order
d) Click the "Apply" button to save changes
Step 4: Verify Name Service configuration
a) Telnet to the 5210 or 5310 NAS
b) At "Connect to" screen, enter admin
c) Use hostlook command to perform a host lookup function:
> hostlook red
red:
Name:  red
Addr:  172.19.86.245
If the NIS+ configuration is correct and it is used as the primary "Host Order" naming service, information about the entered host will be displayed.

Product
Sun StorageTek 5310 NAS Appliance
Sun StorageTek 5210 NAS Appliance

5210, 5310, nas, NIS+
Previously Published As
82512

Change History
Date: 2006-01-04
User Name: 120551
Action: Add Comment
Comment: I have several updates to your document. Can you review and make change where
needed in your document. I need this document to accompany my SE5x10 checklists for NIS install.

Thanks Dave.

*****************************
NIS + configuration

1. The nisserver script below will create a NIS + sparc server.

nisserver -r -d nasclass.com - Create NIS+ Server

nispopulate -f -p /nis+files -d nasclass.com (convert files to nis+)

The nisserver script will create a password : nisplus

2. Manually add credentials for the NAS head to the home domain servers credentials file. The nisaddcred command is used to perform this action.

At the NIS+ home domain server, log in as root

Enter the following command:

# nisaddcred -p unix.@domain-name -P .domain-name. des

-- is the name of the NAS head
-- domain-name is the NIS+ domain the NAS head is joining.
-- Do not forget the trailing "." in the -P .domain-name.

Once the above is entered, the user is prompted to enter a password. The password will be used later for the Secure RPC Password.

Enter the password and make note of it the credentials are now created

Example:

To add a NAS head with the hostname "nas5x01" to the "nasclass.com" NIS+ domain:

# /usr/bin/nisaddcred -p unix.nas5x01@nasclass.com -P nas5x01.nasclass.com. des

3. Configuring NIS+ on the NAS head

Using the NAS GUI web browser, connect to the NAS head

Make the following selections:
"Unix Configuration" --> "Set Up NIS+"

On the resulting input screen configure the following:

Check "Enable NIS+"
Home Domain Server: IP address of the NIS+ server

NIS+ domain: NIS+ domain with a period on the end
Secure RPC Password: Password used when performing the nisaddcred from above
Search Path: leave it blank
Use Broadcast - not checked

Click the "Apply" button to save changes

4. Configuring Name Services

Make the following selections:
"Unix Configuration" --> "Configure Name Services"

On the resulting input screen configure the NIS+ look-up order for the following:

User Order
Groups Order
Netgroups Order
Hosts Order

d) Click the "Apply" button to save changes

5. Verify Name Service configuration

a) Telnet to the NAS head

b) At "Connect to" screen, enter admin

c) Use hostlook command to perform a host lookup function:

> hostlook northstar

Name: northstar
Alias: northstar
Addr: 192.168.0.65

If the NIS+ configuration is correct and it is used as the primary "Host Order"
naming service, information about the entered host will be displayed.

6. To test the NIS + server create a NIS+ group and display details. Remember to include the trailing period.

/usr/bin/nisgrpadm -c admin.nasclass.com.
/usr/bin/nisgrpadm -l admin.nasclass.com.

7. Other NIS+ server commands to test successful installation
/usr/lib/nis/nisping -C nasclass.com.
/usr/bin/niscat rpc.org_dir
Version: 0
Date: 2005-09-02
User Name: 25440
Action: Approved
Comment: Changed example domain name and IP address to ficticious examples as mandated in the Sun Editorial Style Guide. Publishing.
Version: 3
Date: 2005-09-02
User Name: 25440
Action: Accept
Comment:
Version: 0
Date: 2005-09-02
User Name: 124974
Action: Approved
Comment: Looks good.
Version: 0
Date: 2005-09-02
User Name: 124974
Action: Accept
Comment:
Version: 0
Date: 2005-09-02
User Name: 119902
Action: Approved
Comment: Please review for technical accuracy
Version: 0
Date: 2005-09-02
User Name: 119902
Action: Created
Comment:
Version: 0
Product_uuid
63654ce5-f88d-11d8-ab63-080020a9ed93|Sun StorageTek 5310 NAS Appliance
d4e4fc3d-7c3f-11d8-9e3a-080020a9ed93|Sun StorageTek 5210 NAS Appliance

Attachments

This solution has no attachment