From: Pedro AF. Cunha (Pedro.Cunha@decsis.pt)
Date: Thu Jul 10 2003 - 05:16:53 EDT
Hello all,
I've got two replies that I've posted below. I plan do the moving by mid August, until there I've to do a lot of tests on this move.
My special thanks to:
Rochelle Lauer [rochelle.lauer@yale.edu]
Ann Majeske [Ann.Majeske@HP.com]
Replies:
There's instructions in the Security Administration manual
on setting up Enhanced Security and NIS in a cluster.
To copy the accounts from one cluster to the other,
in addition to doing all of the things you'd normally do
to move users from one system to another (moving/copying
home directories, copying entries from /etc/passwd and /etc/group, etc.)
To copy NIS protected password database information
from one NIS domain to another:
on first NIS master: #/usr/tcb/bin/edauth -N -g > prpasswd.out
copy prpasswd.out to new NIS master.
on second NIS master: #edauth -s -N < prpasswd.out
Note that you have to do this AFTER setting up the
accounts in the passwd map, or it won't work. You may
also be able to just copy the prpasswd map from the
first NIS master to the second.
To copy local user protected password database information
from one Enhanced Security system to another:
on first system: #/usr/tcb/bin/edauth -g > auth.out
copy auth.out to new system and edit it to remove any
system accounts that you don't want/need copied from
the first system.
on second system: #edauth -s < auth.out
Note that you have to do this AFTER setting up the
accounts in the /etc/passwd file, or it won't work.
To copy NIS protected password database information
from a NIS domain to local protected password database
(auth.db) on another system:
on NIS master: #/usr/tcb/bin/edauth -N -g > prpasswd.out
copy prpasswd.out to new system.
on second system: #edauth -s < prpasswd.out
Note that you have to do this AFTER setting up the
accounts in the /etc/passwd file, or it won't work.
----------------------------------------------------------------------------
If you stay with NIS no move is necessary. NIS is a cluster aware application and works fine in the TruCluster 5.1B environment. When creating the cluster with clu_create, your NIS should be converted to run in the cluster ( the master is the default cluster alias).
Why do you want to move from NIS ?
regards
rochelle lauer
rochelle.lauer@yale.edu
-----Original Message-----
From: Pedro AF. Cunha
Sent: terça-feira, 8 de Julho de 2003 17:06
To: tru64-unix-managers@ornl.gov
Subject: Moving users from V4.0F ASE+C2+NIS to 5.1B Cluster+C2+NIS
Hi Gurus,
We're in a process of moving our users from the 4.0F version with ASE and C2 with prpasswd distributed via NIS, to a 5.1B Cluster with C2 and maybe with NIS.
I've a few questions on this?
1. What would be the best process to do this move?
2. How can I convert the prpasswd to the format of /var/auth/files/auth.db?
Many thanks in advance.
Greetings,
Pedro Cunha
(Systems Engineer)
Decsis - Sistemas de Informação, Lda.
Rua Pedro Hispano, 1329
4250-368 Porto
Portugal
Tel: +351 228349310
Fax: +351 228349319
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:26 EDT