Re: [RFC] Remove supoort for NIS(+) from PAM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 1 Oct 2021 at 12:51, Tomasz Torcz <tomek@xxxxxxxxxxxxxx> wrote:
>
> On Fri, Oct 01, 2021 at 12:28:38PM -0400, Stephen John Smoogen wrote:
> > On Fri, 1 Oct 2021 at 12:21, Frank Ch. Eigler <fche@xxxxxxxxxx> wrote:
> > >
> > > Stephen John Smoogen <smooge@xxxxxxxxx> writes:
> > >
> > > > The places I have seen it still being used are in Universities run by
> > > > people who learned sysadmin in the 1990's and early 2000's. It is a
> > > > light weight system which is simple to set up [...]
> > >
> > > For those people who like simple to set up and working systems but are
> > > willing to consider upgrading if it's also simple and will keep working,
> > > is there a NIS->$whatever migration document in fedora someplace?
> >
> > I don't think anyone has come up with an agreed upon $whatever that a
> > majority of people like. There is LDAP but that isn't light. There are
> > kerberos but that isn't easy.
>
>   There's FreeIPA, which makes both of them easy. And we even ship is a
> Fedora feature.
>

As much as I love FreeIPA.. it is not as simple as going into a
directory, typing make and having your central systems
passwords,hosts, groups, uids now available to everyone else on your
network. And yes all that power is available in plaintext without any
confirmation that it is valid or correct :).. but it is done in 2-5
minutes and probably extended by scripts written over a 35 year
timeframe. Most of the site admins running NIS I know would change
their text editor to $that_other_one before they would turn off NIS.

My own opinion is that it is way past time to stop using it and
supporting it. I understand its allure, but I also understand the
allure of .rhosts files with * in them.

> > And honestly the cool kids only want web
> > logins these days as servers are a pain and why not just login into
> > Google/Facebook/Microsoft and let them deal with all that setup.
>
> --
> Tomasz Torcz                 Morality must always be based on practicality.
> tomek@xxxxxxxxxxxxxx                 — Baron Vladimir Harkonnen
> _______________________________________________
> devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure



-- 
Stephen J Smoogen.
I've seen things you people wouldn't believe. Flame wars in
sci.astro.orion. I have seen SPAM filters overload because of Godwin's
Law. All those moments will be lost in time... like posts on a BBS...
time to shutdown -h now.
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux