From owner-freebsd-questions@FreeBSD.ORG Fri Aug 11 00:48:36 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E7BDA16A4DD for ; Fri, 11 Aug 2006 00:48:36 +0000 (UTC) (envelope-from youshi10@u.washington.edu) Received: from mxout3.cac.washington.edu (mxout3.cac.washington.edu [140.142.32.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id 81E8A43D46 for ; Fri, 11 Aug 2006 00:48:36 +0000 (GMT) (envelope-from youshi10@u.washington.edu) Received: from smtp.washington.edu (smtp.washington.edu [140.142.32.139]) by mxout3.cac.washington.edu (8.13.7+UW06.06/8.13.7+UW06.03) with ESMTP id k7B0maV2008694 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 10 Aug 2006 17:48:36 -0700 X-Auth-Received: from [192.168.0.50] (dsl254-013-145.sea1.dsl.speakeasy.net [216.254.13.145]) (authenticated authid=youshi10) by smtp.washington.edu (8.13.7+UW06.06/8.13.7+UW06.03) with ESMTP id k7B0mZBR024228 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Thu, 10 Aug 2006 17:48:35 -0700 Message-ID: <44DBD3E2.5060609@u.washington.edu> Date: Thu, 10 Aug 2006 17:48:34 -0700 From: Garrett Cooper User-Agent: Thunderbird 1.5.0.5 (X11/20060805) MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <44D3AD1E.5010807@u.washington.edu> <9aa9fc180608101132i68956d5fg2bae5f411c6ad9f8@mail.gmail.com> In-Reply-To: <9aa9fc180608101132i68956d5fg2bae5f411c6ad9f8@mail.gmail.com> X-Enigmail-Version: 0.94.0.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-PMX-Version: 5.2.0.264296, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.8.10.172932 X-Uwash-Spam: Gauge=IIIIIII, Probability=7%, Report='__CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_MSGID 0, __LINES_OF_YELLING 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0, __USER_AGENT 0' Subject: Re: NIS and Kerberos 5 : is it possible / smart? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Aug 2006 00:48:37 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Scott Peshak wrote: > On 8/4/06, Garrett Cooper wrote: >> Hi all, >> Just wondering if it's possible for NIS and Kerberos 5 to work in >> tandem with one another, such that NIS would handle groups and >> configuration file management and Kerberos would handle authentication >> only. Also, is this sort of overkill perhaps, where NIS is not really >> needed? >> I basically have 3+ machines (2 desktops, 1 laptop, currently), and >> I want to keep my credentials and information uniform across the >> machines as much as possible. The network I would be implementing this >> on is a low-traffic, private network. > > On my low-traffic, private network I use a combination of krb5 and > hesiod. If you're already running a dns server I would suggest at > least a look at hesiod, you wouldn't need to add any new services. > > Scott Hmmmm... the only problem with this is that it doesn't look like it's easily enabled out of the box for OSX authentication (assuming that I actually did filesharing via hesoid). - -Garrett -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE29Pi6CkrZkzMC68RAn2HAJ4+4mvliNBjKNPnA8sxxUL0VjlwdACfbsnl Rw/mNOVYi+ZTW5zraIR4cCg= =/G3v -----END PGP SIGNATURE-----