Re: [YBA] NIS vs LDAP

2007-12-27 Thread Ofek Doron [Ofek BIZ]
Hi All, All of you consider Active directory as an LDAP server, this is not truth, AD is a kerberos environment that LDAP served as a backend (the first AD server is authentication server, TGS server, KDC, schema master, and LDAP server). AFAIK for that kind of heterogeneous environmen

RE: [YBA] NIS vs LDAP

2007-12-26 Thread Imri Zvik
- > [EMAIL PROTECTED] On Behalf Of Ohad Levy > Sent: Wednesday, December 26, 2007 3:22 AM > To: ILUG > Subject: Re: [YBA] NIS vs LDAP > > Hi, > > just my couple of cents: > > AD and Linux authentication works quite well, that means for > authentication only, you c

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Ohad Levy
Hi, just my couple of cents: AD and Linux authentication works quite well, that means for authentication only, you can use kerborse to authenitcate users that you have on your AD. however, its quite important to know, that user id mapping will be done via winbind (or maybe a mapping file), and

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Ariel Biener
On Tuesday, 25 בDecember 2007 21:54, Shachar Shemesh wrote: > There is one thing that everyone in this discussion seem to have missed > so far, and that is that AD *is* LDAP. > > Ariel Biener wrote: > > Well, I wouldn't chose any of the above in the way it is described. I > > believe that MS AD is

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Shachar Shemesh
There is one thing that everyone in this discussion seem to have missed so far, and that is that AD *is* LDAP. Ariel Biener wrote: Well, I wouldn't chose any of the above in the way it is described. I believe that MS AD is the best tool to use for Windows environment, LDAP is the best tool f

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Ariel Biener
On Tuesday, 25 בDecember 2007 17:13, Geoffrey S. Mendelson wrote: > > However be aware that except for Windows, NFS uses *NIX user numbers > for access control. If your user name to user number mapping is > not consistent across all your systems you can have security > problems. Indeed, consistenc

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Geoffrey S. Mendelson
On Tue, Dec 25, 2007 at 04:43:40PM +0200, Ariel Biener wrote: > Well, I wouldn't chose any of the above in the way it is described. I believe > that MS AD is the best tool to use for Windows environment, LDAP is the > best tool for a Linux environment, and NIS is the best tool in that it is alot >

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Ariel Biener
On Tuesday, 25 בDecember 2007 09:34, Jonathan Ben Avraham wrote: > Hi Linux-IL members, > I am considering setting up a heterogenous work environment with about > 100 high-end Linux work stations, 40 MS Windows, and 10 Mac's. The > underlying common authentication system will likely be LDAP. Would

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Oded Arbel
On Tue, 2007-12-25 at 11:04 +0200, Noam Meltzer wrote: > Speaking of LDAP management: > I have had the best experience with this tool: > http://muclm.sourceforge.net/ > > Highly configurable, plug-in system, user-friendly, and installation > takes 5 seconds. Not as feature complete, but I use a

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Noam Meltzer
Speaking of LDAP management: I have had the best experience with this tool: http://muclm.sourceforge.net/ Highly configurable, plug-in system, user-friendly, and installation takes 5 seconds. On Dec 25, 2007 10:35 AM, Oded Arbel <[EMAIL PROTECTED]> wrote: > > On Tue, 2007-12-25 at 09:34 +0200, J

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Oded Arbel
On Tue, 2007-12-25 at 09:34 +0200, Jonathan Ben Avraham wrote: > I am considering setting up a heterogenous work environment with about > 100 high-end Linux work stations, 40 MS Windows, and 10 Mac's. The > underlying common authentication system will likely be LDAP. Would NIS or > Active Direc

Re: [YBA] NIS vs LDAP

2007-12-25 Thread Noam Meltzer
Hi, 1. Regarding NIS vs. LDAP: The way I see things, NIS is obsolete in 2007 (and much before) for the following reasons: NIS is not secure: everything goes plain text over the network; You can not prohibit "standard" users to see other users password hash (ie. you can't make the shadow map privat