This blog is in continuation of the blog (http://blogs.technet.com/b/dsix/archive/2009/04/06/password-synchronization-between-windows-and-unix-part-ii.aspx) where we had discussed on syncing password changes from Unix to Windows.
Based on our testing and research, we did find some additional steps which need to be done to propagate the password changes from UNIX toWindows. However, this would not be a very much recommended scenario and may be not that smooth as syncing password changes from Windows to UNIX password changes sync. The password changes made from UNIX are synced properly to Windows inspite of getting some error messages in the event logs.
The steps below are environment specific; we tried to keep it generic; mostly applicable to other similar environments as well.
Syncing one way password (Windows to UNIX) on a NIS environment is discussed on this blog.
Steps to sync password from UNIX ==> Windows on a NIS environment
Configuration required on Windows side:
Installation of the Password Synchronization daemon on Solaris:
ENCRYPT_KEY=encryptionKey ( as mentioned on the Windows DC)
PORT_NUMBER=portNumber ( as mentioned on the Windows DC)
SYNC_HOSTS=(domainController[,portNumber [, encryptionKey]]) ...
Note:Each entry in the list must be enclosed by parentheses and separated from the next entry by a blank space.
Configuring the Solaris NIS Client (reproduced from a third party link):
1. Configure a domain name:
#domainname <domain name>
#domainname > /etc/defaultdomain
2. Configure the NIS configuration file:
# cd /etc
#cp nsswitch.nis nsswitch.conf
3. Configure the host file:
Add theNIS server's information. Always use the server's name in the NIS configuration.
4. Start the YP service:
#/usr/lib/netsvc/yp/ypstart (to stop the service /usr/lib/netsvc/yp/ypstop)
5. Configure the slave server as an NIS client first:
#ypinit - c
(Select n to avoid stopping the process in an error.)
Provide the name of the NIS masterserver. Press 'Ctrl + d' and then press 'y'.
6. Check the NIS database:
# ypwhich -m
the link to the blog in the first line doesn't work
Pasted the correct link.