Hi,

1. Regarding NIS vs. LDAP:
The way I see things, NIS is obsolete in 2007 (and much before) for the
following reasons: NIS is not secure: everything goes plain text over the
network; You can not prohibit "standard" users to see other users password
hash (ie. you can't make the shadow map private for root). NIS is not
scalable as LDAP: LDAP (in the Sun DS / Sun OpenDS / RedHat DS) offers you
multi master replication, hubs, proxies and so on. (What is mostly relevant
for you is the multi master replication)
Personally I would recommend the Sun DS (it's free) or Sun OpenDS (it's
licensed as CDDL).

2. AD vs. LDAP:
Not really an expert here, but I assume that there is currently  no
substitution for the features an AD will provide you in terms of management.

Samba3 provides NT style domain, if that's enough for you, than you might
want to go with Samba3 and LDAP as the backend.
Samba4 alpha1 provides Win2K AD style domain, if your balls are big enough,
you might want to try it ;-)

3. Macintosh:
Have no experience what so ever here, but I understand that its BSD
underneath, so I assume that LDAP can go well here.
Does Apple have any management tool for many macs?

- Noam

On Dec 25, 2007 9:34 AM, Jonathan Ben Avraham <[EMAIL PROTECTED]> wrote:

> Hi Linux-IL members,
> I am considering setting up a heterogenous work environment with about
> 100 high-end Linux work stations, 40 MS Windows, and 10 Mac's. The
> underlying common authentication system will likely be LDAP. Would NIS or
> Active Directories be more appropriate for this type of environment?
> TIA,
>
>  - yba
>
>
> --
>  EE 77 7F 30 4A 64 2E C5  83 5F E7 49 A6 82 29 BA    ~. .~   Tk Open
> Systems
>
> =}------------------------------------------------ooO--U--Ooo------------{=
>      - [EMAIL PROTECTED] - tel: +972.2.679.5364, http://www.tkos.co.il -
>
> =================================================================
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>

Reply via email to