Solaris help ?

Author
Discussion

J4CKO

Original Poster:

41,558 posts

200 months

Thursday 25th May 2017
quotequote all
Need some help with Solaris 10, got some issues and limited skills, after some suggestions as to where I could buy some skills in for a day ?

nyt

1,807 posts

150 months

Thursday 25th May 2017
quotequote all
You could try: https://www.freelancer.com

Are your problems Solaris specific? Would any Linux/Unix guru do?

8bit

4,867 posts

155 months

Friday 26th May 2017
quotequote all
What are the issues? I'm a Unix/Linux admin by trade and work with Solaris fairly extensively. PM if you want.

ging84

8,897 posts

146 months

Sunday 28th May 2017
quotequote all
What does limited skills mean? You have Unix / Linux admins without the skills to confidently deal with some very complex solaris specific issues, or is it more like you have admins who know a bit of nix but lack the skills to confidently deal with anything beyond basic tasks?

J4CKO

Original Poster:

41,558 posts

200 months

Tuesday 30th May 2017
quotequote all
ging84 said:
What does limited skills mean? You have Unix / Linux admins without the skills to confidently deal with some very complex solaris specific issues, or is it more like you have admins who know a bit of nix but lack the skills to confidently deal with anything beyond basic tasks?
Mainly a windows shop, bit of Linux but the Solaris we inherited and the guys that supported that environment have moved on.

My senior DBA has goo Linux skills but for the first time ever he has expressed concern about performing some tasks so would like some insurance int he form of a Solaris expert on hand.

ging84

8,897 posts

146 months

Tuesday 30th May 2017
quotequote all
Guess you are a bit screwed trying to find a genuine solaris specialist these days will be tough.
You are really going to be best doing it through personal recommendations locally or you will have to pay a lot of money or end up with a Linux engineer who worked on a solaris system a couple of times, which is basically what you've already got.

n3il123

2,607 posts

213 months

Tuesday 30th May 2017
quotequote all
ging84 said:
Guess you are a bit screwed trying to find a genuine solaris specialist these days will be tough.
You are really going to be best doing it through personal recommendations locally or you will have to pay a lot of money or end up with a Linux engineer who worked on a solaris system a couple of times, which is basically what you've already got.
In that case I did a Solaris course in about 1996, where do I send my invoice wink

seyre1972

2,628 posts

143 months

Tuesday 30th May 2017
quotequote all
J8CKO,

Post up what you're looking to achieve - I'm sure we can collectively assist.

Plenty of people around with the skills you're after (me included - but definitely a non strategic Hardware/OS these days)most of the project work I do is change the business/moving services from Solaris onto Linux VM/physicals.

long term - sounds like the business needs to get a support contract in place if the Solaris is in the minority of your server estate.

PS - you don't work for British Airways do you ..... smile

Cheers,

Seyre1972

Edited by seyre1972 on Tuesday 30th May 13:05

gavsdavs

1,203 posts

126 months

Tuesday 30th May 2017
quotequote all
What's the query - I looked after solaris machines for a few years.

it's like linux only a lot better smile

PM me if stuck

J4CKO

Original Poster:

41,558 posts

200 months

Friday 2nd June 2017
quotequote all
Ok, what happened is, we lost a server, a scratch/dev server that hadnt been used in ages, turns out it had the server end of NIS/YP on it.

Question is, can we stop the client end on our Solaris server, what are the implications, we arent sure what will happen if we stop that service, we cant reinstate the server that was removed, we are concerned it has cached info.

I believe NIS isnt Solaris specific, we have a similar server that doesn't have that process.

8bit

4,867 posts

155 months

Friday 2nd June 2017
quotequote all
J4CKO said:
Ok, what happened is, we lost a server, a scratch/dev server that hadnt been used in ages, turns out it had the server end of NIS/YP on it.

Question is, can we stop the client end on our Solaris server, what are the implications, we arent sure what will happen if we stop that service, we cant reinstate the server that was removed, we are concerned it has cached info.

I believe NIS isnt Solaris specific, we have a similar server that doesn't have that process.
In short - yes. You'll need to recreate any user accounts from NIS into the local /etc/passwd, /etc/shadow files and any groups into /etc/group. If your remaining server(s) are Solaris 10 then "svcadm stop svc:/network/nis/client:default" will stop the NIS client daemons and "svcadm disable svc:/network/nis/client:default" will prevent them starting at boot. You may need to edit /etc/nsswitch.conf as well.

Do you have a backup of the NIS map files, usually stored in /var/yp/etc ? If so then you could fairly easily recreate the NIS domain on another server.

seyre1972

2,628 posts

143 months

Friday 2nd June 2017
quotequote all
J4CKO said:
Ok, what happened is, we lost a server, a scratch/dev server that hadnt been used in ages, turns out it had the server end of NIS/YP on it.

Question is, can we stop the client end on our Solaris server, what are the implications, we arent sure what will happen if we stop that service, we cant reinstate the server that was removed, we are concerned it has cached info.

I believe NIS isnt Solaris specific, we have a similar server that doesn't have that process.
Hi J4CKO,

Likely on the SOL10 server it will have Name Service Cache Daemon (NSCD) running - so currently cached usernames/password/hosts (dependent upon what Maps you had configured on the NIS Master)

In practice if you stop NSCD, the client won't have any data (as the NIS master is down) and cached data will be lost.

DONT STOP NSCD/REBOOT THE SOL10 SERVER !!

If you have no backup of the NIS Master ... you're a bit screwed tbh.

Short term if possible - create a new NIS/YP Master/SLAVE server on a PAIR OF PROD Linux servers if possible re-create your maps.

Long-term

What's your usual naming service ? AD for example. I'd make plans to migrate your legacy servers to your naming service of choice.

On the SOL10 server - maybe run # ypwhich -m

This will show what NIS maps/which server was providing them etc.

If you can somehow get access (boot maintenance on the failed server). NIS maps/source are usually held under /var/yp and you'll need /etc/up.conf.


Cheers,

Seyre1972

gavsdavs

1,203 posts

126 months

Saturday 3rd June 2017
quotequote all
J4CKO said:
Ok, what happened is, we lost a server, a scratch/dev server that hadnt been used in ages, turns out it had the server end of NIS/YP on it.

Question is, can we stop the client end on our Solaris server, what are the implications, we arent sure what will happen if we stop that service, we cant reinstate the server that was removed, we are concerned it has cached info.

I believe NIS isnt Solaris specific, we have a similar server that doesn't have that process.
Yes, NIS is/was a naming service. It publishes maps of information for other unix machines (which will be running a nis client process called ypbind).

It can publish a number of 'maps' mostly stuff like
"passwd" (usernames, user ids, home drives, group ids),
"shadow", or "passwd.adjunct" - the crypts of passwords for the userids in the passwd map
"aliases"
"group" - group members (this is user groups)
"netgroup" - not the same as groups.
"auto.home" - where the automounter looks for homedrives, etc.
and so on.

The key bit is that you can work out what maps were in use on this machine and others by looking in nsswitch.conf, where the maps and the map sources are listed/configured.

If you have the server or clients looking for nis data, they may well not be able to enumerate some things - you may see processes or files running with userid, but not a resolved username.

The server will be running a bunch of NIS server components and if it's talking to its own NIS server, the nis/client (ypbind) process too. This server may well depend on data being published by the server

As has been indicated you can enable/disable services with svcadm and list their status with "svcs".

"ypwhich" will tell you the nis server a host is "bound" to (if the client up and running) and ypwhich -m will list the master server for the NIS domain and the maps it's publishing. The master is likely to say "localhost" or its own hostname (because duh, it's the nis server)

nscd is the "name service caching daemon" and is sometimes configured to run and sometimes not. It only caches for a finite period and is not necessary to keep the system running, though it improves performance for a busy system.

To enumerate the maps
"ypcat -k <mapname>" to list the maps eg "ypcat -k passwd", "ypcat -k group".

use "getent <mapname>" to have the server walk and expand the maps as listed in nsswitch, - for example "getent passwd" will enumerate the local password file and then any source listed in for the passwd map in nsswitch.conf (i.e. NIS/LDAP/etc)

If you only see the same number of items listed in getent passwd as you see in the password file, you are not enumerating the nis data and something isnt working properly. (Assuming passwd is has NIS after it in nsswitch.conf)

have a poke round /var/yp or /etc/nis for map files.

https://www.google.co.uk/url?sa=t&rct=j&q=...

Should be a link to the O'Reilly book "Managing NFS and NIS" in pdf form.

Gavs

Edited by gavsdavs on Saturday 3rd June 18:03

J4CKO

Original Poster:

41,558 posts

200 months

Monday 5th June 2017
quotequote all
Awesome, many thanks chaps, will do some digging and report back today.

J4CKO

Original Poster:

41,558 posts

200 months

Monday 5th June 2017
quotequote all
This is the contentsof nsswitch.conf on the client



automount: files nis
aliases: files nis

  1. for efficient getservbyname() avoid nis
services: files nis
printers: user files nis

auth_attr: files nis
prof_attr: files nis
project: files nis




ypwhich
Domain <domain>.com not bound on <Server in question>.


Edited by J4CKO on Monday 5th June 14:44

J4CKO

Original Poster:

41,558 posts

200 months

Monday 5th June 2017
quotequote all
ypwhich -m

ypwhich(dumpmaps): can't get maplist: RPC: Timed out

gavsdavs

1,203 posts

126 months

Monday 5th June 2017
quotequote all
so the server isn't bound.

svcs -a | grep -i nis

You should have 3/4 (I'm rusty) server services and a client service.

also try listing the processes

ps -lef |grep -i yp

You should have a few (ypserv, ypbind, yppasswdd)

J4CKO

Original Poster:

41,558 posts

200 months

Monday 5th June 2017
quotequote all
The server isnt available, this is just on the client.

Also, ls seems to hang my session if I have the e parameter in

Cheers for your assistance !



J4CKO

Original Poster:

41,558 posts

200 months

Monday 5th June 2017
quotequote all
0 383 1 0 40 20 ? 1060 ? ? 986:20 ypbind
0 S 0 5973 383 0 40 20 ? 1060 ? ? 0:00 ypbind

gavsdavs

1,203 posts

126 months

Monday 5th June 2017
quotequote all
J4CKO said:
The server isnt available, this is just on the client.

Also, ls seems to hang my session if I have the e parameter in

Cheers for your assistance !
Oh - so if the server has gone for ever, just remove the nis entries from nsswitch,conf from the relevant maps.

If the server is still there, and staying, then the client isn't bound, and is trying to

What operating system is this nis client ?

Is the server there, or gone and not coming back ?