How to Administer NIS+ Credentials

How to Administer NIS+ Credentials


The nisaddcred command can be used to create, update and remove LOCAL
and DES credentials.

To create or update credentials for another NIS+ principal:

%% nisaddcred -p uid -P principal-name local
%% nisaddcred -p rpc-netname -P principal-name des

The rpc-netname is unix.uid@domain_name for a user, and
unix.hostname@domain_name for the root user on a host. Note that these
domainnames do NOT contain a trailing dot, unlike most NIS+ commands.
The principal-name is name.domain_name., where name can be user name
or a hostname.

For example, joe (uid 555) in the example.com domain has the following
names:

principal-name: joe.example.com.
rpc-netname: unix.555@example.com

While root on the machine testhas the following names:

principal-name: test.example.com.
rpc-netname: unix.test@example.com

A few caveats: you can only create DES credentials for a client
workstation. DES credentials may only be created in the client's home
domain. However, you can create LOCAL credentials for a client user in
other domains.

To remove credentials:

%% nisaddcred -r principal-name

Home
FAQ