From owner-freebsd-questions@FreeBSD.ORG Wed Jun 8 21:52:46 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E424E16A436 for ; Wed, 8 Jun 2005 21:52:46 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.73]) by mx1.FreeBSD.org (Postfix) with ESMTP id B56C143D1F for ; Wed, 8 Jun 2005 21:52:46 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from mac.com (smtpin02-en2 [10.13.10.147]) by smtpout.mac.com (Xserve/8.12.11/smtpout16/MantshX 4.0) with ESMTP id j58LqiIF023900; Wed, 8 Jun 2005 14:52:45 -0700 (PDT) Received: from [192.168.1.6] (pool-68-161-69-6.ny325.east.verizon.net [68.161.69.6]) (authenticated bits=0) by mac.com (Xserve/smtpin02/MantshX 4.0) with ESMTP id j58LqgJN025445; Wed, 8 Jun 2005 14:52:43 -0700 (PDT) In-Reply-To: <20050608164118.G23444@mail.goinet.com> References: <5EE9BD2D-25F2-40C1-A166-2359C9C11788@mac.com> <20050608164118.G23444@mail.goinet.com> Mime-Version: 1.0 (Apple Message framework v730) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <1D7F3A83-C580-4473-A8D2-BF05A68AD076@mac.com> Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Wed, 8 Jun 2005 17:52:41 -0400 To: Tony Shadwick X-Mailer: Apple Mail (2.730) Cc: freebsd-questions@freebsd.org Subject: Re: 5.x, LDAP and caching uid/gid data X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2005 21:52:47 -0000 On Jun 8, 2005, at 5:42 PM, Tony Shadwick wrote: >> I am not sure that lookupd has been used or tested or shaken down >> as much with FreeBSD, so the integration with PAM may not be as >> mature as it's usage with the nss_ mechanism. >> >> However, if you really want nscd, I'd imagine that you ought to be >> able to hunt that down from Sun now that the source code for >> Solaris 10 is openly available...? > > What about caching, as he asked originally? If a laptop user > "walks away" from the network where the LDAP or NIS server is > located, will it cache auth info so the user can still get in? For a while, and the timeouts for caching stuff are adjustable. That being said, laptop users are going to do much better if their specific UID/GID are added to the local flatfiles. Integrating laptops to work while connected and while not connected is a relatively hard problem. -- -Chuck