Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 11 Jun 1998 16:44:19 -0700 (PDT)
From:      Tom <tom@uniserve.com>
To:        Atipa <freebsd@atipa.com>
Cc:        John Kenagy <jktheowl@bga.com>, freebsd-stable@FreeBSD.ORG
Subject:   Re: NIS client maintenance script
Message-ID:  <Pine.BSF.3.96.980611163854.10500F-100000@shell.uniserve.ca>
In-Reply-To: <Pine.BSF.3.96.980611162450.14678A-100000@altrox.atipa.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On Thu, 11 Jun 1998, Atipa wrote:

> >   There are several problems with the script as attached.
> > 
> >   It assumes only one NIS server ($nis_host).  You'd have to be mad to
> > have only one NIS server in a production environment, especially since
> > clients can automatically kick over to another if one fails.
> 
> Correct. This script is not dynamic. I am using it primarily for machines
> w/o NIS servers on their network. Setting up slave servers would eliminate
> several problems.

  Yes, but the new ypbind has no problems handling multiple non-local
servers.  I'm hoping to see it committed before 2.2.7.

> >   Since all the *pwnam fuctions (getpwnam, getpwent, etc) are flawed in
> > that they can not return a temporary failure code, such functions should
> > block until NIS services are back up.  This is critical for systems
> > running mail service, because you don't want all your users to disappear
> > when NIS goes down.
> 
> But you don't want to have to wait 14 minutes (7 minutes each for user
> login, then su) to remedy problems. 

  Yes, but admin users should be listed in the system /etc/master.passwd
so they can always login.  The current yplib is bit broken in that it
depends on YP even if all necessary info for login is in /etc.  For
example, if you only have a "+" in master.passwd, root should be able to
login without delay, even if YP is down.

> If no network services are available, your users will go away period,
> unless they are somehow cached (eg slave server).

  For example, it is better that e-mail be delayed until YP is back up,
rather than to bounce all e-mail as "user unknown" while YP is down.

> Suggestions?
> 
> Kevin

Tom


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980611163854.10500F-100000>