Re: NIS or not?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



> -----Original Message-----
> From: centos-bounces@xxxxxxxxxx [mailto:centos-bounces@xxxxxxxxxx] On
> Behalf Of Jeffrey Hass
> Sent: den 29 januari 2014 08:47
> To: CentOS mailing list
> Subject: Re:  NIS or not?
>
> Hi friend -
>
> what is your end goal with this effort to obtain security with your
> nodes over the 'wire' -
>
> there are some other solutions -- kerberos is now used heavily by
> microsoft so that's enough to make me
> run for the hills... just saying..
>
> i've set up other solutions to be sure -- even against the blasted (not
> a real LDAP) AD.
>
> anyway.. just some thoughts... it's not trivial. any of the solutions, btw.
> not at all..
>
> j/h
> San Francisco/Holland/Saudi Arabia

Primarily to enable less administration in the long run with centralized 
logins, instead of keeping each single client updated with respect to shadow, 
passwd, bashrc, hosts and so on.

Some sort of encryption would probably be wise to use, as NIS uses clear text 
passwords. I don't trust our university network that much, even though the 
traffic should pretty localized.

I'm aware that setting up Kerberos probably will be a big project, 
nevertheless, we must do something about the current mess. As I'm the single 
sysadmin at the department, my time is finite. Automation is good, but as I 
wrote before, regular bash-scripting (however powerful) will only take you so 
far. 8-/
--
//Sorin
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux