[ILUG] Connecting a Windows machine to a NIS domain?

[Bailey, Darragh]

> -----Original Message-----
> From: ilug-bounces at linux.ie [mailto:ilug-bounces at linux.ie] On 
> Behalf Of Conor Wynne
> Sent: 10 August 2010 14:33
> To: ilug at linux.ie
> Subject: Re: [ILUG] Connecting a Windows machine to a NIS domain?

<snipage>

> If you must use NIS, then all you have available is to 
> install services
> for unix on the windows box. This can sync local users with NIS users,
> aswell as AD with NIS.
> http://technet.microsoft.com/en-us/library/bb463211.aspx

Fairly certain it's not that straight forward, mostly due to the fact that all the configuration options seem to revolve around setting up the Win2k8 server as the master server, but no options simply to have it map the data to AD while acting as a client to an existing Linux master server.

Spotted the following text in the link you sent me:
"Server for NIS can be used only as a master server for NIS. It cannot function as a subordinate (slave) NIS server in a domain where a UNIX-based server is a master NIS server[1]"

........

"[1] Server for NIS implements all procedures necessary for a master NIS server. It does not implement ypxfr procedure used by a slave NIS server. Slave servers must transfer maps using ypcat (yp_all). It implements map replication through Active directory replication."

Which to me summarizes as, you have to migrate the NIS master onto Windows box if you want to continue to use NIS and connect you're Windows machines into the same network even if you only want to add it as a client.

> You can get your *nix boxen speaking AD though, fairly 
> straight forward
> with samba.
> Or you could use migrate them to LDAP, and your windows box can auth
> with that aswell, burt its tricky as MS use a different LDAP/kerberos
> implementation in AD.


Unless I'm completely mistaken about the NIS support, it seems that switching to LDAP would be the only sane way forward.


> We sync all our machines with AD in our lab, linux / unix / 
> windows. Its
> fairly straightforward.
> 
> Regards
> Conor.

--
Darragh Bailey