ypserv.1m (2010 09)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages

ypserv(1M) ypserv(1M)

ypbind recognizes the following options:

-l log_file Log diagnostic and error messages to the ﬁle, log_ﬁle . See the description above.

-s Enable secure mode in ypbind. When speciﬁed, only NIS servers bound to a

reserved port are used. This allows for a slight increase in security in completely

controlled environments, where there are no computers operated by untrusted indi-

viduals. It offers no signiﬁcant increase in security. This option should be used in

conjunction with the broadcast mode and is transport speciﬁc.

-ypset Allow ypset to be used to change the binding (see ypset (1M)). For maximum secu-

rity, this option should be used only when debugging the network from a remote

machine.

-ypsetme Allow ypset to be issued from this machine (see ypset (1M)). Security is based on

IP address checking, which can be defeated on networks where untrusted individu-

als may inject packets. This option is not recommended.

-broadcast When ypbind is invoked with this option,

ypbind will try to establish a binding

by broadcast even though the ﬁle

/var/yp/binding/

domain_name /ypservers exists. That is, the option

-broadcast overrides the existence of this ﬁle.

-broadcast is used in conjunction with the -ypset or -ypsetme option, then

the ypbind binds using the -broadcast method and the binding can be changed

by using the ypset command. If ypbind is invoked with the -ypset or

-ypsetme option, the NIS servers list in the ﬁle

/var/yp/binding/domain_name

/ypservers is used for initial binding and

the binding can be changed by using the

ypset command.

WARNINGS

NIS uses ndbm ﬁles to store maps. Therefore, it is subject to the 1024 byte limitations described in the

WARNINGS section of the ndbm(3X) man page.

Starting with ONCplus version B.11.31.02, the NIS Version 1 protocol is no longer available.

AUTHOR

ypserv, ypbind, and ypxfrd were developed by Sun Microsystems, Inc.

FILES

/var/yp/binding/domain_name

/cache_binding

This ﬁle caches the last successful binding created for the given

domain, domain_name , in order to to speed up the binding process.

When a binding is requested, this ﬁle is checked for validity and

then used.

/var/yp/securenets This ﬁle is read by both ypserv and ypxfrd at startup time. It

deﬁnes the hosts and networks which are granted access to infor-

mation in the served domain.

/var/yp/secureservers This ﬁle is read by ypbind. It contains a list of IP addresses that

ypbind will receive a binding from.

/var/yp/binding/domain_name /ypservers

This ﬁle is read by ypbind. It contains the list of NIS servers that

ypbind will attempt to bind to, if ypbind is not invoked with a

-broadcast option.