Re: Distributed authentication. Which one?

From: Tillman Hodgson (tillman_at_seekingfire.com)
Date: 10/17/05

  • Next message: Ted Cabeen: "Re: Loading permanent ARP entries at boot time"
    Date: Mon, 17 Oct 2005 14:33:53 -0600
    To: freebsd-isp@freebsd.org
    
    

    On Sun, Oct 16, 2005 at 01:04:08AM -0400, Francisco Reyes wrote:
    > >I would say LDAP, but then I've never used NIS.
    >
    > The general comment I am seeing in archives is that it is not commonly
    > used anymore.

    It has some interoperability and security issues. They're solvable, IMO.
    For example, most of the security concerns can be addressed with a
    combination of transport-mode IPsec and Kerberos and I avoid inter-
    operability issues by avoiding weird implementations of NIS ;-)

    -T

    -- 
    "I once bought a cellphone that had a little sticker on the box that said
     'DO NOT EAT PACKAGING MATERIAL'. There went another freebie snack at the
      office."
        - A.S.R. quote (Andreas "Buzh" Skau)
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
    

  • Next message: Ted Cabeen: "Re: Loading permanent ARP entries at boot time"

    Relevant Pages

    • Re: Sparc Solaris NIS client Linux NIS server
      ... >>>fairly trivial to auto create NIS users based on Windows ... >> LDAP works much, much better for providing single-source authentication. ... Security is a problem, ...
      (comp.os.linux.setup)
    • Re: How safe am I really?
      ... Have you disabled "Automatic Firewall Rule ... Creation" (wherever that is actually located in NIS 2003)? ... some others may only appear in the Security Alerts log.. ... when you PERMIT your web browser to have Internet ...
      (alt.computer.security)
    • Re: Trying to replace NIS+
      ... >> looking like a NIS server, complete with NIS security issues. ... but I know the LDAP server with Solaris supports ...
      (comp.unix.solaris)
    • SUMMARY: securnets issue?
      ... Subject: securenets issue? ... related work for Sun Microsystems). ... I have a great deal of awareness of security issues, ... allowed to access NIS information. ...
      (SunManagers)
    • Re: PAM and LinuxRouter questions
      ... >>I also suggest you use ANYTHING but NIS. ... >>better when it comes to the security aspects of name service. ... NIS+ and LDAP appear to a lot worse. ... If you're in an all Linux/Unix environment, ...
      (Focus-Linux)