NAME

ypserv — NIS server daemon

SYNOPSIS

ypserv

[-dfl] [-p port]

DESCRIPTION

ypserv is a fundamental part of the network information system called NIS. This server provides information from NIS maps to the NIS clients on the network.

A NIS map is stored on the server as a db(3) database. A number of NIS maps is grouped together in a domain. ypserv determines the domains it serves by looking for a directory with the domain name in /var/yp.

In an effort to improve the security of NIS (which has, historically, not been very good), this ypserv has support for libwrap-based access control. See hosts_access(5) for more information. The daemon used for access control is the name which ypserv was invoked as (typically “ypserv”). If a host is not allowed to query this NIS server, ypserv will return the NIS result code YP_NODOM. To avoid problems with DNS lookups causing ypserv to hang, ypserv disables DNS lookups for its client hosts_access(5) lists. The result is that ypserv can only use address based patterns. This also means that wildcard patterns such as LOCAL or KNOWN will not work.

The process pid of the ypserv process can be found in the file /var/run/ypserv.pid.

The options are as follows:

-d

Use internet Domain Name System. If a query to map hosts.byname or hosts.byaddr fails, make a DNS query and return the result if successful.

-f

Run in the foreground.

-l

Enable logging of all requests.

-p port

Bind to the specified port instead of dynamically allocating one.

All messages are sent to the system log with the facility LOG_DAEMON. Error messages have the priority LOG_ERR. Refused requests are logged with the priority LOG_WARNING. All other messages are logged with the priority LOG_INFO.

FILES

/var/run/ypserv.pid

SEE ALSO

syslog(3), hosts_access(5), nis(8), syslogd(8), ypbind(8), ypinit(8)

AUTHORS

This implementation of ypserv was originally written by Mats O Jansson <moj@stacken.kth.se>. The access control code was later re-written from scratch by Jason R. Thorpe <thorpej@NetBSD.org>.