From owner-freebsd-security Sat Feb 28 22:22:03 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id WAA25810 for freebsd-security-outgoing; Sat, 28 Feb 1998 22:22:03 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from fledge.watson.org (root@FLEDGE.RES.CMU.EDU [128.2.91.116]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA25767 for ; Sat, 28 Feb 1998 22:21:44 -0800 (PST) (envelope-from robert@cyrus.watson.org) Received: from trojanhorse.pr.watson.org (trojanhorse.pr.watson.org [192.0.2.10]) by fledge.watson.org (8.8.8/8.6.10) with SMTP id BAA15412; Sun, 1 Mar 1998 01:21:34 -0500 (EST) Date: Sun, 1 Mar 1998 01:19:05 -0500 (EST) From: Robert Watson X-Sender: robert@trojanhorse.pr.watson.org Reply-To: Robert Watson To: Javier Henderson cc: Christopher J Ceska , freebsd-security@FreeBSD.ORG Subject: Re: Question In-Reply-To: <199803010551.VAA18342@kjsl.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk On Sat, 28 Feb 1998, Javier Henderson wrote: > > What would be a good method to have two servers run the same passwd file? > > Run VMS? > > Oh, sorry, wrong crowd. > > Seriously, has anyone thought about writing something > equivalent to VMS clusters? This is not a veiled attempt at starting a > my-os-is-better-than-yours war. Maybe something useful could come of > an educated discussion of the advantages of VMS clusters. Jav, I'm not familiar with the VMS clustering behavior -- what services does it provide? NIS can certainly provide an (insecure) password/etc sharing option under FreeBSD, although personally I make use of Kerberos and use a distributed file system for moving password files/etc around. I have always found the concept of Hesiod appealing -- especially now that DNSsec seems to be working out. The Athena secure DNS (via kerberos) concept never did much for me, though. None of these solutions are particularly transparent, though -- perhaps having a shared /etc/usefulfiles and working NFS locking (and a few other snippets) would be a reasonable answer for small-scale clustering. Robert N Watson Carnegie Mellon University http://www.cmu.edu/ SafePort Network Services http://www.safeport.com/ robert@fledge.watson.org http://www.watson.org/~robert/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message