[rhn-users] NIS problems pushing maps from master to slave

Gary Wilson Jr gdub at ece.utexas.edu
Wed Jun 15 13:14:08 UTC 2005


I am trying to set up a NIS master and slave on EL4 AS machines.
I have the following in /etc/sysconfig/network:
YPSERV_ARGS="-p 834"
YPXFRD_ARGS="-p 835"

I have iptables rules set up on both to allow ports 111, 834, and 835.
When I run make in /var/yp on the master it tries to push
to the slave, but times out.

When I turn the firewalls off, I am able to push with no problem.
So I ran tcpdump on the slave and tried 'yppush group.byname' on the master.
Here is the capture:

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
09:54:47.394245 IP master.domain.com.680 > slave.domain.com.sunrpc: UDP, length 56
09:54:47.395709 IP slave.domain.com.sunrpc > master.domain.com.680: UDP, length 28
09:54:47.396459 IP master.domain.com.681 > slave.domain.com.834: UDP, length 112
09:54:47.396872 IP slave.domain.com.834 > master.domain.com.681: UDP, length 32
09:54:47.398811 IP slave.domain.com.880 > master.domain.com.sunrpc: UDP, length 56
09:54:47.399077 IP master.domain.com.sunrpc > slave.domain.com.880: UDP, length 28
09:54:47.399188 IP slave.domain.com.881 > master.domain.com.834: UDP, length 68
09:54:47.399458 IP master.domain.com.834 > slave.domain.com.881: UDP, length 56
09:54:47.399494 IP slave.domain.com.881 > master.domain.com.834: UDP, length 68
09:54:47.399703 IP master.domain.com.834 > slave.domain.com.881: UDP, length 32
09:54:47.400422 IP slave.domain.com.882 > master.domain.com.682: UDP, length 48
09:54:47.400702 IP master.domain.com > slave.domain.com: icmp 84: host master.domain.com unreachable - admin prohibited

If you notice, at the end, slave tries to send to port 682 on the master.
This is what I believe is causing the push to fail with the firewalls on.
All the other communications are to specified ports.
Is there another setting I need to use to make the yp stuff run on a certain port?





More information about the rhn-users mailing list