Planning an NIS configuration

When planning an NIS configuration, you must gauge your network administration needs with regard to domain structure, server disposition, security concerns, and the physical structure of the network. Your configuration will also be affected if the network is heterogeneous, that is, if it includes hosts running operating systems other than SCO systems. The following sections explain these considerations in more detail.

Selecting domains

For most NIS installations, a single domain is sufficient to satisfy users' needs. However, if your site has multiple networks, you must create separate domains for each network because NIS domains cannot cross network boundaries. A possible network division might be into accounting, marketing, and manufacturing domains.

In such an environment, it is recommended that there be one master and at least one slave server for each domain.

Selecting servers

Two factors are important in selecting master and slave servers: uptime and synchronization. The master server should be a host that is stable and available for NIS requests. This suggests that a machine be dedicated as a master server and that there be at least one slave server for each master in a domain should the master become unavailable.

The master and slave servers should have CPUs of comparable power to those of the machines to which they will propagate maps. This is particularly important in heterogeneous environments where a number of NIS clients running on other operating systems may seek to bind with the most available server. Because it is essential that current map information be uniformly available across the network, availability and equivalent speed of servers ensure that the propagation of map information is synchronized.

In an NIS environment comprised of SCO machines exclusively, slave servers can be used as a backup to the master server and to improve the ability to service map update requests from copy-only servers. In a heterogeneous environment, slave servers should be added as needed to keep up with requests from clients running on other operating systems.

The physical structure of the network may influence the distribution of slave servers. For example, if you have a network that includes a bridge, you will probably want at least two slave servers on either side. This is because NIS requests are delayed when crossing bridges. The result is that a server on the same side of a bridge as the requesting host will satisfy a request sooner than one on the far side, even if the closer server is heavily loaded. Having two slave servers on the requesting side of the bridge removes a virtual reliance on one server that may be heavily loaded.

Security

Although NIS is designed to administer password and group authorization files, such administration is incompatible with C2 security. SCO NIS maintains C2 security in an NIS environment by enforcing the following restrictions:

• Only copy-only servers may be initialized on Secure Mode machines.

• Copy-only servers in Secure Mode may not use password and group maps for authentication. This means that master and slave servers are not afforded C2 protection.

In a heterogeneous environment, SCO copy-only servers under C2 protection continue to refuse password and group maps from master or slave servers running on other operating systems. However, an SCO master or slave server (by definition in Unsecure Mode) may be able to propagate maps to C2-protected clients on other operating systems. Consult your client's documentation to address your security concerns. Refer also to ``NIS interaction with security modes''.

See also:

• ``NIS domain''

• ``NIS servers and clients''

Home Notes   Home   MCSE   MCSE + Security   CCNA   CCNP   Schedule   Register   Frequently Asked Questions   Course Fees   Contact US   Boot Camp Location   Compare us to our competitors   Testimonials   Sitemap

Testimonials

Join MCSE Boot Camp & CCNA Boot Camp Back to Back Certification Today. links  270    290    291  293    294  298  299  Security  640-801  routing 811  821   831  Resources MCSE + CCNA  Training  Card pay  Papal  MCSE Notes  CCNA Notes    index main  root link  resources home    Ref1 Ref2

Vibrant offers MCSE certification training boot camp for $5400 all inclusive, instructor led at California and Baltimore.

Vibrant Bootcamp Participants come from All Around the World. Vibrant has trained students from more than 15 countries like USA, UK, (Scotland, Ireland, Wales), Switzerland, Germany, Australia, Canada, France, Holland, Japan, Belgium, Bahrain, New Zealand, Tanzania, Turkey, Kenya and more.