Re: Syncing 3 Freebsd servers' accounts Question

From: Erik Norgaard (norgaard_at_locolomo.org)
Date: 01/28/05

  • Next message: Michael Johnson: "Re: Missing INDEX file in Ports" 
    Date: Fri, 28 Jan 2005 11:48:51 +0100
To: *** Davies <rasputnik@hellooperator.net>

    *** Davies wrote:
    >>O'Reilly has a really good book on LDAP "LDAP System Administration" -
    >>includes a chapter on how to migrate from NIS to LDAP.
    >
    > IMO that's one of the few bad oreilly books
    > the orielly book is more of a cookbook, but does'nt really explain what's
    > going on.

    You have a problem, and you want to solve it. I find the O'Reilly book a
    good guide. I didn't claim it will give you a complete understanding of
    the protocol or X.509 etc. But it will show you how to solve the problem
    at hand, and give ideas of how to exploit LDAP further.

    > NetBSD is almost finished integrating pluggable nsswitch modules, I doubt openbsd
    > will be far behind. No offence to the openbsd crew but if you waited for them to support
    > something before using it on freebsd you wouldn't be running much...

    I think the whole idea of pam is against their fundamental philosophy,
    so I wouldn't expect to see this any time soon.

    >>Also, LDAP requires you to obtain Object Identifiers if you defnine new
    >>types, I haven't heard of OID that can be used for private/experimental
    >>purposes only (like the private ip address spaces).
    >
    > There's no need to get an OID registered (unlike IP addresses; it's not like
    > it's routed) but it's free and they'll happily give you one if you ask.

    You will need to have your directory service available for the internet
    if you eg. want to distribute certificates - the most common use I
    think. And you will need OID if you want to add your own extensions to
    the v3 certificate.

    But even if not, just to make sure that your choice of OID will not
    clash with commonly distributed entries, it would be convenient to have
    a private playground, where any interference is _your_ problem.

    I know they will give you a branch for free if you ask, but I guess that
    will change if we all request such a branch.

    Anyway, the predefined schemes much satturates the need of most SOHO's.

    Cheers, Erik 

    -- 
Ph: +34.666334818                           web: http://www.locolomo.org
S/MIME Certificate: http://www.locolomo.org/crt/2004071206.crt
Subject ID:  A9:76:7A:ED:06:95:2B:8D:48:97:CE:F2:3F:42:C8:F2:22:DE:4C:B9
Fingerprint: 4A:E8:63:38:46:F6:9A:5D:B4:DC:29:41:3F:62:D3:0A:73:25:67:C2
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
  • Next message: Michael Johnson: "Re: Missing INDEX file in Ports"