[m-rev.] diff: NIS

[Mark Brown]

Thanks for making this change.

On 31-Mar-2006, Zoltan Somogyi <zs at cs.mu.OZ.AU> wrote:
> cvs diff: Diffing .
> Index: nis
> ===================================================================
> RCS file: /home/mercury/mercury1/repository/local/nis,v
> retrieving revision 1.3
> diff -u -b -r1.3 nis
> --- nis	22 Nov 2005 06:40:46 -0000	1.3
> +++ nis	31 Mar 2006 05:24:38 -0000
> @@ -15,22 +15,42 @@
>  slave is down at that time.  The cron job is in /etc/cron.d/nis.
>  
>  
> +Adding a new user
> +---------------------------
> +
> +The addition of a new user should be done on the NIS master server.
> +It can be done in the following steps:
> +
> +1. Add the new user to the password file, using either the useradd or adduser
> +   programs (using their options to specify the home directory, uid, group etc).
> +   Note that if the user already has an account on the main departmental
> +   machines, you should copy his or her uid from there.

One thing to note is that root at swordfish (which is who will be running
adduser) doesn't have write permission on /home/mercury, which is owned by
root at ceres, and so can't create the home directory and populate it with
the skeleton files.

I think the best solution is to ask tech services to make root at swordfish the
owner of /home/mercury, so I'll do that now.  In future, if the NIS master
changes we should also change the owner of /home/mercury to match.

We should also document who owns /home/mercury somewhere.  If it isn't done
by next week then someone please remind me.

> +
> +   The password file entries of new users should go below the '+::0:0:::' line
> +   in /etc/passwd, to make them visible to NIS. The adduser and useradd
> +   programs however put the new entry above this line, so you will usually
> +   need to edit /etc/passwd (using vipw) after running adduser.
> +
> +2. Make the user know to NIS by cd'ing to /var/yp and running "make".
> +
> +3. Set the user's password, by running "passws <username>" as root.

s/passws/passwd/

Why is step 3 required?  If you don't specify --disabled-password to adduser
then it should be set in step 1.

Cheers,
Mark.

--------------------------------------------------------------------------
mercury-reviews mailing list
post:  mercury-reviews at cs.mu.oz.au
administrative address: owner-mercury-reviews at cs.mu.oz.au
unsubscribe: Address: mercury-reviews-request at cs.mu.oz.au Message: unsubscribe
subscribe:   Address: mercury-reviews-request at cs.mu.oz.au Message: subscribe
--------------------------------------------------------------------------