-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 01/03/16 19:29, Alexander Bokovoy wrote:
> Alternatively, do following:
> 
> ipa-nis-manage disable
> 
> ldapsearch -xLLL -D "cn=Directory Manager" -W -s onelevel -b "cn=NIS 
> Server,cn=plugins,cn=config" dn
> 
> You'll get list of DNs like this: dn: 
> nis-domain=<domain>+nis-map=ethers.byaddr,cn=NIS Server,cn=plugins,cn=config
> 
> dn: nis-domain=<domain>+nis-map=ethers.byname,cn=NIS 
> Server,cn=plugins,cn=config
> 
> Run ldapdelete -D "cn=Directory Manager" -W "<dn1>" "<dn2>" ...
> 
> where <dn..> is what you've got after "dn: "
> 
> This is how you can delete those entries.
> 
> After that, run 'ipa-nis-manage enable'.
> 

Hi Alex,

sorry to say, but it did not work:

[root@ipa2 ~]# ipa-nis-manage disable
Directory Manager password:

This setting will not take effect until you restart Directory Server.
[root@ipa2 ~]# systemctl restart dirsrv@EXAMPLE-COM
[root@ipa2 ~]# ldapsearch -xLLL -D "cn=Directory Manager" -W -s onelevel -b 
"cn=NIS Server,cn=plugins,cn=config" dn
Enter LDAP Password:
dn: nis-domain=example.com+nis-map=ethers.byaddr,cn=NIS Server,cn=plugins,cn=con
 fig

dn: nis-domain=example.com+nis-map=ethers.byname,cn=NIS Server,cn=plugins,cn=con
 fig

[root@ipa2 ~]# ldapdelete -D "cn=Directory Manager" -W 
"nis-domain=example.com+nis-map=ethers.byaddr,cn=NIS 
Server,cn=plugins,cn=config" 
"nis-domain=example.com+nis-map=ethers.byname,cn=NIS 
Server,cn=plugins,cn=config"
Enter LDAP Password:
[root@ipa2 ~]# ipa-nis-manage enable
Directory Manager password:

Enabling plugin
This setting will not take effect until you restart Directory Server.
The portmap service may need to be started.
[root@ipa2 ~]# systemctl restart dirsrv@EXAMPLE-COM
[root@ipa2 ~]# systemctl restart rpcbind
[root@ipa2 ~]# ypcat -h localhost -d example.com passwd
No such map passwd.byname. Reason: No such map in server's domain
[root@ipa2 ~]# ldapsearch -xLLL -D "cn=Directory Manager" -W -s onelevel -b 
"cn=NIS Server,cn=plugins,cn=config" dn
Enter LDAP Password:
[root@ipa2 ~]#

I tried it on a replica, though.


Regards
Harri

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWiX8pAAoJEAqeKp5m04HLx2AH/igd+rgZf5FAXRBKk+M5qmHN
kofjuCJ2aTaLRMmqY1J9FINsRax4pThP71bC34jHo2mQFWW15aNi7SYaur4cpEzW
XA+0DLFmryS1yocg0HoFFfUK/lJxjL/uMm5yY7HI0A04QcrxCfoDjtOR4IqNLpGn
eQwi6UmQdvv7srLfd2nKHtCgsmssq9jVzcH8c+EHm4aR/qL6V7dsDDiFYvuqvGu8
3mdw3sPCpxNC/9a259E5FUFZVocTrmucUKURzn07Ff6pckzonWY7kVVuieRZGzWC
NYSsjl/Ai8o/qKW4DY+1dp3NeYYXnUG69PuO4EkgJ/l5oU3CCJJTkv6MVO6tFhs=
=GIng
-----END PGP SIGNATURE-----

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to