Things I do when debugging NIS:

    * very "domainname" is set correctly
    * ypwhich (you said this works)
* ypcat passwd (if this works then NIS is working fine, but maybe nsswitch.conf is messed up) * make sure my netmask is set properly, or that ypinit -c was used with the IP address of the master or a working slave
    * double check nsswitch.conf
    * restart nscd if necessary

My first guess here is that maybe the domainname is not set properly?

    - Garrett

On 04/ 1/10 06:04 AM, Ben wrote:
Hi all,

I've got a global zone which acts as a NIS master.  It should also share out 
the users home directories.  On the master, the auto_master map looks like this:
#+auto_master
/net            -hosts          -nosuid,nobrowse
/home           auto_home       -nobrowse

And the auto_home map looks like this:
#+auto_home
*       Master:/export/home/&

These are copied from the Solaris 10 Admin Part 2 books from the Sun course.  I 
presumed this still applied for OpenSolaris.

My problem is that my client zone can see the master (ypwhich knows what the 
master is), but it won't recognise users.  If I try to SSH to the zone from the 
glabal-zone as my main user, it does work:
$ ssh ad...@testzone
The authenticity of host 'testzone (10.0.1.2)' can't be established.
RSA key fingerprint is 7b:65:40:53:08:db:2e:1c:ca:96:5e:e5:9b:5b:72:5e.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'testzone,10.0.1.2' (RSA) to the list of known hosts.
Password:
Password:
Password:
Permission denied (gssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive).

I have just double checked, and the nsswitch.conf in the client zone is set to 
use NIS.  I'm a bit stumped...

Many thanks for any help,

Ben

_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to