FC3: NIS client cannot connect to NIS server, need broadcast option

[ghee22]

so to start the server is not the problem nor is physical connectivity with this computer. (i have it working with other computers and i'm able to ssh into this one from them)
i don't understand where system-config-authentication stores it's .conf file
i don't understand how to turn on broadcast for NIS client

i stored the server in system-config-authentication and tried leaving server option blank.. failed.
then i changed server option to "broadcast" (w/out quotes)... failed.

so i decided to edit the config for NIS client manually.
i edited /etc/yp.conf with the correct syntax:
domain xxx broadcast
where xxx is my domain name; rebooted... failed.

Then i ran system-config-authentication and turns out that changes /etc/yp.conf doesn't even show up! are there 2 diff. conf. files ?? how can i use the broadcast option.
thank you!
parag

[benca1]

I would suggest watching /var/log/messages when you try to connect to your yp server. You'll most likely discover the problem there.

Make sure your NIS domain is in /etc/sysconfig/network

NIS can be a tough one to troubleshoot, fortunately there's only so many files. Differences in the OS between clients and master can really muck things up too.

Make sure portmap is running. Forget rebooting, just stop and restart the network service.

Sorry if none of this is of any help!

Post any error messages, etc.

[ghee22]

ok so i found out what the problem is. i turned off the firewall and now i'm able to locate the server and login

thanks!

now i have to find out how to let the firewall only let NIS go through which is hard because NIS uses dynamic ports on startup. i don't want to leave the firewall just off completely. how should i go about doing this?

[benca1]

Originally Posted by ghee22

ok so i found out what the problem is. i turned off the firewall and now i'm able to locate the server and login

thanks!

now i have to find out how to let the firewall only let NIS go through which is hard because NIS uses dynamic ports on startup. i don't want to leave the firewall just off completely. how should i go about doing this?

Oh yes, the firewall. I've only ever used NIS behind firewalls on secure LANs. I've never heard of anyone using NIS on an untrusted network. I don't know a thing about it, and I think I can say I wouldn't feel comfortable doing it. NIS+ is supposed to offer better security and it might be better suited for you.

Still, take a look at /etc/services and see if you can change the port used in there. Then you can allow UDP traffic over that port through your firewall... but then this would be for inherently insecure software anyway!

I say ditch one or the other.