Getting netgroups through NIS doesn't work. Issuing ypcat netgroup on a NIS client machine doesn't return any netgroups (ypcat passwd and ypcat group work as expected). On the server, the following error message gets added to /var/log/messages:
ypcat netgroup
ypcat passwd
ypcat group
ns-slapd: warning: can't get client address: Bad file descriptor
Cannot reproduce on both reporter's systems and newly installed IPA 2.1 set ups.
After installing IPA with both ipa-server-install --selfsign and ipa-server-install (default), then enabling NIS support with 'ipa-nis-manage enable', NIS properly works from clients that are activated with 'authconfig --update --enablenis --nisdomain=domain --nisserver=server' and restarting appropriate services. Checked both with iptables enabled and without any firewalls.
I'm suspecting this was networking hardware/resolution issue which caused connections to be dropped and thus portmap unable to properly resolve the addressee due to prematurely closed socket.
Metadata Update from @jcholast: - Issue assigned to abbra - Issue set to the milestone: FreeIPA 2.1.1 (bug fixing)
Login to comment on this ticket.