Chapter 21. Integrating with NIS Domains and Netgroups
21.1. About NIS and Identity Management
- Users and passwords
- Host names and IP addresses
- POSIX groups.
NIS in Identity Management
nss_ldapusing an encrypted LDAP connection.
NIS Plug-ins in Identity Management
- NIS Server Plug-in
- The NIS Server plug-in enables the IdM-integrated LDAP server to act as a NIS server for clients. In this role, Directory Server dynamically generates and updates NIS maps according to the configuration. Using the plug-in, IdM serves clients using the NIS protocol as an NIS server.For further details, see Section 21.2, “Enabling NIS in Identity Management”.
- Schema Compatibility Plug-in
- The Schema Compatibility plug-in enables the Directory Server back end to provide an alternate view of entries stored in part of the directory information tree (DIT). This includes adding, dropping, or renaming attribute values, and optionally retrieving values for attributes from multiple entries in the tree.For further details, see the
21.1.1. NIS Netgroups in Identity Management
- Nested groups (groups as members of other groups).
- Grouping hosts.
- A value.
- A dash (
-), which specifies "no valid value"
- No value. An empty field specifies a wildcard.
- to a traditional NIS map and sends it to the client over the NIS protocol by using the NIS plug-in.
- to an LDAP format that is compliant with RFC 2307 or RFC 2307bis.
22.214.171.124. Displaying NIS Netgroup Entries
memberUserattribute, and hosts and host groups in
memberHost. The following example shows a netgroup entry in Directory Server component of IdM:
Example 21.1. A NIS Entry in Directory Server
dn: ipaUniqueID=d4453480-cc53-11dd-ad8b-0800200c9a66,cn=ng,cn=alt,... ... cn: netgroup1 memberHost: fqdn=host1.example.com,cn=computers,cn=accounts,... memberHost: cn=VirtGuests,cn=hostgroups,cn=accounts,... memberUser: cn=demo,cn=users,cn=accounts,... memberUser: cn=Engineering,cn=groups,cn=accounts,... nisDomainName: nisdomain.example.com
ipa netgroup-*commands. For example, to display a netgroup entry:
Example 21.2. Displaying a Netgroup Entry
[root@server ~]# ipa netgroup-show netgroup1 Netgroup name: netgroup1 Description: my netgroup NIS domain name: nisdomain.example.com Member Host: VirtGuests Member Host: host1.example.com Member User: demo Member User: Engineering