Netapp Nis

De BlaxWiki
Aller à la navigationAller à la recherche
Majorité des commandes à faire en mode advanced :
   set -privilege advanced

Vérifier que les serveurs sont biens config et OK :
   vserver services name-service nis-domain show-bound -vserver Prod-cible-sas-nfs
   on doit voir 172.19.6.2, 172.19.6.3

Changement des caches :
	name-service cache group-membership settings modify -vserver Prod-cible-sas-nfs -grplist-ttl 1h
	name-service cache unix-group settings modify -vserver Prod-cible-sas-nfs -ttl 1h
	name-service cache unix-user settings modify -vserver Prod-cible-sas-nfs -ttl 1h
	
	Rollback : 
		name-service cache group-membership settings modify -vserver Prod-cible-sas-nfs -grplist-ttl 24h
		name-service cache unix-group settings modify -vserver Prod-cible-sas-nfs -ttl 24h
		name-service cache unix-user settings modify -vserver Prod-cible-sas-nfs -ttl 24h
		
Activation du NIS :
	vserver services name-service ns-switch modify -vserver Prod-cible-sas-nfs -database group -sources nis,files
	vserver services name-service ns-switch modify -vserver Prod-cible-sas-nfs -database passwd -sources nis,files
	vserver services name-service ns-switch modify -vserver Prod-cible-sas-nfs -database netgroup -sources nis,files
	
	event log show
	verif si nis-domain group-database status -vserver Prod-cible-sas-nfs
	   sinon nis-domain group-database build -vserver Prod-cible-sas-nfs
	
	vserver nfs modify -vserver Prod-cible-sas-nfs -auth-sys-extended-groups enabled -extended-groups-limit 64
	
	Pour rollback :
		vserver nfs modify -vserver Prod-cible-sas-nfs -auth-sys-extended-groups disabled -extended-groups-limit 32
		vserver services name-service ns-switch modify -vserver Prod-cible-sas-nfs -database group -sources files
		vserver services name-service ns-switch modify -vserver Prod-cible-sas-nfs -database passwd -sources files
		vserver services name-service ns-switch modify -vserver Prod-cible-sas-nfs -database netgroup -sources files




Pour debug en cas de prob :
Commande de test pour un user
name-service cache group-membership show -vserver Prod-cible-sas-nfs
diag nblade credentials show -vserver Prod-cible-sas-nfs -unix-user-id 1234

clear cache :
secd cache clear-nfs -node Node01 -vserver SVM01 -user User01
diag secd cache clear -node FAS8200MC1N1 -vserver Prod-cible-sas-nfs -cache-name nis-group-membership
name-service cache group-membership delete -vserver SVM01 -user User01 -group PrimaryGID
diag nblade credentials flush -node Node01 -vserver SVM01 -unix-user-name User01
cluster1::> vserver services name-service cache unix-user user-by-id delete-all -vserver vs0

cluster1::> vserver services name-service cache unix-group group-by-gid delete-all -vserver vs0
cluster1::> vserver services name-service cache unix-group group-by-name delete-all -vserver vs0

cluster1::> vserver services name-service cache netgroups ip-to-netgroup delete-all -vserver vs0
cluster1::> vserver services name-service cache netgroups members delete-all -vserver vs0

cluster1::> vserver services name-service cache hosts forward-lookup delete-all -vserver vs0
cluster1::> vserver services name-service cache hosts reverse-lookup delete-all -vserver vs0

cluster1::> vserver services name-service cache group-membership delete-all -vserver vs0