Re: Sparc Solaris NIS client Linux NIS server


"Menno Duursma" <menno@xxxxxxxxxxx> wrote in message
news:pan.2005.12.13.10.03.51.534225@xxxxxxxxxxxxxx
> On Mon, 12 Dec 2005 21:59:46 -0500, Nico Kadel-Garcia wrote:
>> "Chris Cox" <ccox_nopenotthis@xxxxxxxxxxx> wrote:
>>
>>> If the number of accounts are small (not in the 10,000's) then
>>> managing users with NIS is much simpler than with .. let's say...
>>> LDAP. If you have an existing Windows infrastructure, it's
>>> fairly trivial to auto create NIS users based on Windows
>>> account data and tie the password back to the Windows
>>> password server (which may bother Unix purists...
>
> Eew. And yeah; i've done this before too (so sue me). Some versions of
> MS-Windows (2000 and 2003) default to act as a Kerberos KDC if setup as
> PDC/BDC. Linux login/ssh/etc can autenticate to that too ...
>
>>> but does work.. and if you've got the ugly animal there anyway...
>>> might as well use it).
>>
>> Bullwinkle, that trick *NEVER* works.
>
> No. It always does. Just edit the "shadow" entry in /etc/nsswitch.conf to
> be "winbind" - run the winbindd service. And if this client machine uses
> PAM: configure that to use it also.

OK, that makes sense. But that has *NOTHING* to do with NIS. It's
authenticating against the winbind first.

>> LDAP works much, much better for providing single-source authentication.
>
> s/LDAP/Kerberos/

I've had considerable trouble setting up the Kerberos in the first place,
especially in then getting it working to operating systems other than Linux.
I've got scars from my SunOS and Solaris efforts for that. Unless it's
gotten wildly easier in Solaris 9 and 10, I'll stick with the LDAP.


.

Relevant Pages

  • Re: Sparc Solaris NIS client Linux NIS server
    ... >>If the number of accounts are small then ... >>fairly trivial to auto create NIS users based on Windows ... > LDAP works much, much better for providing single-source authentication. ...
    (comp.os.linux.setup)
  • Re: NIS 2002 Pro edition :-)
    ... >>A couple of months back I complained about NIS 2001 not using the Windows ... >>accounts to prevent changes. ... I'm now using NIS 2002 Professional Edition, ... > I tried it but the "by user settings" is not all true. ...
    (comp.security.firewalls)
  • Re: Sparc Solaris NIS client Linux NIS server
    ... > If the number of accounts are small then ... > fairly trivial to auto create NIS users based on Windows ... > the Windows client. ...
    (comp.os.linux.setup)
  • Re: Sparc Solaris NIS client Linux NIS server
    ... >> If the number of accounts are small then ... >> managing users with NIS is much simpler than with .. ... >> fairly trivial to auto create NIS users based on Windows ...
    (comp.os.linux.setup)
  • Re: NIS 2002 Pro edition :-)
    ... >A couple of months back I complained about NIS 2001 not using the Windows ... >accounts to prevent changes. ... I'm now using NIS 2002 Professional Edition, ... I tried it but the "by user settings" is not all true. ...
    (comp.security.firewalls)