From owner-freebsd-security  Tue Apr  9 20:58:26 2002
Delivered-To: freebsd-security@freebsd.org
Received: from topperwein.dyndns.org (acs-24-154-28-203.zoominternet.net [24.154.28.203])
	by hub.freebsd.org (Postfix) with ESMTP id 514B037B416
	for <security@freebsd.org>; Tue,  9 Apr 2002 20:58:22 -0700 (PDT)
Received: from topperwein (topperwein [192.168.168.10])
	by topperwein.dyndns.org (8.11.6/8.11.6) with ESMTP id g3A3wH307926
	for <security@freebsd.org>; Tue, 9 Apr 2002 23:58:18 -0400 (EDT)
	(envelope-from behanna@zbzoom.net)
Date: Tue, 9 Apr 2002 23:58:12 -0400 (EDT)
From: Chris BeHanna <behanna@zbzoom.net>
Reply-To: Chris BeHanna <behanna@zbzoom.net>
To: FreeBSD Security <security@freebsd.org>
Subject: Re: Centralized authentication
In-Reply-To: <200204091457.AAA10164@caligula.anu.edu.au>
Message-ID: <20020409235703.N7872-100000@topperwein.dyndns.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Wed, 10 Apr 2002, Darren Reed wrote:

> In some mail from Jacques A. Vidrine, sie said:
> >
> > Yes, Kerberos does `blow away' many authentication systems.  However,
> > the poster's subject --- ``Centralized authentication'' --- doesn't
> > really describe what he needs.  In addition to authentication, he
> > needs authorization and directory services, which Kerberos does not
> > provide.  i.e. there is no Kerberos mechanism with which to distribute
> > the contents of /etc/passwd and /etc/group.
>
> You can use NIS for this or when someone gets around to writing an
> LDAP extension for nsswitch.conf, you could use that.

    Does FreeBSD support NIS+?  In my digging in the FM, it appears
that it does not.  It'd be great if it did.

    (Then, all I'd need is for Sun to get on the ball and support MD5
passwords.)

--
Chris BeHanna
Software Engineer                   (Remove "bogus" before responding.)
behanna@bogus.zbzoom.net
I was raised by a pack of wild corn dogs.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message