From owner-freebsd-stable Thu Apr 2 14:08:50 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA16018 for freebsd-stable-outgoing; Thu, 2 Apr 1998 14:08:50 -0800 (PST) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from passer.osg.gov.bc.ca (passer.osg.gov.bc.ca [142.32.110.29]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA15948 for ; Thu, 2 Apr 1998 14:08:20 -0800 (PST) (envelope-from cschuber@passer.osg.gov.bc.ca) Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.8.8/8.6.10) id OAA06621; Thu, 2 Apr 1998 14:07:23 -0800 (PST) Message-Id: <199804022207.OAA06621@passer.osg.gov.bc.ca> Received: from localhost(127.0.0.1), claiming to be "passer.osg.gov.bc.ca" via SMTP by localhost, id smtpdaaqeFa; Thu Apr 2 14:07:18 1998 X-Mailer: exmh version 2.0gamma 1/27/96 Reply-to: Cy Schubert - ITSD Open Systems Group X-Sender: cschuber To: Tom cc: Charles Quarri , stable@FreeBSD.ORG Subject: Re: Hesiod support on 2.2 In-reply-to: Your message of "Thu, 02 Apr 1998 10:43:45 PST." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 02 Apr 1998 14:06:47 -0800 From: Cy Schubert - ITSD Open Systems Group Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk > > On Thu, 2 Apr 1998, Charles Quarri wrote: > > > I am looking for a central management system like NIS without > > the blatant security holes. I have heard that Hesiod can do this. > > All blatant security holes in NIS depend on how you configure it. You can minimize NIS security holes by limiting which hosts have access to your NIS ports. Another approach I've used (on NIS+) is to put a * in the password fields of the passwd map and use Kerberos V. In this case NIS would serve hosts, services and other maps, and be used for UID to username mapping while Kerberos would be used for user authentication. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 UNIX Support OV/VM: BCSC02(CSCHUBER) ITSD BITNET: CSCHUBER@BCSC02.BITNET Government of BC Internet: cschuber@uumail.gov.bc.ca Cy.Schubert@gems8.gov.bc.ca To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message