On Wednesday 11 January 2006 14:04, Shawn Singh wrote:
> NIS comes to mind and some recommended docs are:
>
> http://www.linux-nis.org/nis-howto/HOWTO/NIS-HOWTO.html
> http://gentoo-wiki.com/HOWTO_Setup_NIS
>
Please be aware of the security issues surrounding nis.  may not be a problem 
in your environment, but they are real.  also, with ANY centralized 
sign-on/authentication methodology, it's VERY, VERY bad idea to have just one 
auth server.  this goes for everything from nis to active directory (which is 
really just ldap).  however, nis might be a good choice in your environment, 
despite the security issues, because if you make ALL of your machines nis 
slaves, and have them authenticate to themselves, if you nis master goes 
down, you can still get on the other boxes.  Or you could just use rdist to 
fan out your /etc/shadow and /etc/passwd files ;)
> On 1/11/06, John Jolet <[EMAIL PROTECTED]> wrote:
> > On Wednesday 11 January 2006 13:51, [EMAIL PROTECTED] wrote:
> > > Is there a term for the situation where you have one computer as the
> > > "user account master" and every other machine recognizes all user
> > > accounts that are specified on the master?
> > >
> > > I'm sure there's plenty of packages and documentation on how to do
> > > this, but I don't know what it's called, so I don't know where to
> > > start looking.
> > >
> > > Basically, I have one OpenBSD box and three gentoo boxes.  I'd like
> > > to have the same user accounts on all of them, but not have to
> > > manually create them each time.  Especially for dealing with Samba
> > > and NFS, it's nice to have consistent accounts.
> > >
> > > Given the name of a couple key packages and/or web links, I think I
> > > could figure the rest out.
> >
> > openldap is one way
> > kerberos is another (don't pick this one)
> > nis or YP is another
> > I prefer openldap, but be warned, all of these methods are fairly
> > non-trivial
> > depending on your experience level.
> >
> > maybe there's a way to do it with sama as well?
> >
> > > Thanks!
> > > Matt
> > >
> > > --
> > > Matt Garman
> > > email at: http://raw-sewage.net/index.php?file=email
> >
> > --
> > John Jolet
> > Your On-Demand IT Department
> > 512-762-0729
> > www.jolet.net
> > [EMAIL PROTECTED]
> > --
> > gentoo-user@gentoo.org mailing list
>
> --
> Shawn Singh

-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
[EMAIL PROTECTED]
-- 
gentoo-user@gentoo.org mailing list

Reply via email to