NIS install for OpenBSD 4.0 Updated 3/7/07 A. Changes to Master Server Presuming that master server is Linux. % touch /etc/master.passwd % chmod 600 /etc/master.passwd /etc/ypserv.conf needs to have the following line added on all NIS servers: *:*:master.password.byname:port Then, you may need to "killall -HUP ypserv" The /var/yp/Makefile needs to be tweaked up on the master. Find the section that starts with "passwd.byname:" that is used when the makefile is told to merge passwd and shadow. Copy the whole section down to where the shadow map is made. change the "passwd.byname:" at the beginning to "master.passwd.byname:". Your cronjob that makes the passwd, shadow and group maps needs to also make master.passwd.btname. If you have yppush lines in your cronjob, also push the master.passwd.byname to each slave. On each slave, run "/usr/lib/yp/ypinit -s (master)" to create the master.passwd.byname association. B. Slave Server I'm not sure if port-based security can be set on a BSD yp server. It is a requirement to safely secure the master.passwd and shadow maps. C. Client Create file /etc/defaultdomain and enter your NIS domain into this file and save it. Make the directory /etc/yp . Create file /etc/yp/DOMAINNAME. On each line, enter just the name of each NIS server. Run the command: chmod 600 /etc/yp/DOMAINNAME Make the directory /var/yp/binding . Create file /var/yp/binding/DOMAINNAME.version Edit /etc/rc.conf . portmap=YES Run "vipw". Enter the following line: +:*:::::::: edit /etc/group . Enter the following lines: +vector:*:: +staff:*:: Run the command "pwd_mkdb -p /etc/master.passwd" Run the command "ln -s /bin/sh /bin/zsh" Reboot, or run: portmap domainname < /etc/defaultdomain ypbind To test, ypcat passwd In order to actually authenticate to the machine, a reboot is required.