nisauthconf controls which authentication flavors NIS+ should use when communicating with other NIS+ clients and servers. If the command is not executed, then NIS+ will default to the AUTH_DES authentication flavor when running security level 2. See rpc.nisd(1M).
nisauthconf takes a list of authentication mechanism's in order of preference. An authentication mechanism may use one or more authentication flavors listed below. If des is the only specified mechanism,
then NIS+ only use AUTH_DES with other NIS+ clients and servers. If des is the first mechanism, then other authentication mechanism's after des will be ignored by NIS+, except for nisaddcred(1M). After changing the mechanism configuration, the keyserv(1M) daemon must be restarted. Note that doing
so will remove encryption keys stored by the running keyserv process. This means that a reboot usually is the safest option when the mechanism configuration has been changed.
The following mechanisms are available:
Authentication mechanism | Authentication Flavor |
des | AUTH_DES |
dh640-0 | RPCSEC_GSS using 640-bit Diffie-Hellman keys |
dh1024-0 | RPCSEC_GSS using 1024-bit Diffie-Hellman keys |
If no mechanisms are specified, then a list of currently configured mechanisms is printed.
|