From owner-freebsd-isp@FreeBSD.ORG Mon Oct 17 20:33:55 2005 Return-Path: X-Original-To: freebsd-isp@freebsd.org Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A938E16A41F for ; Mon, 17 Oct 2005 20:33:55 +0000 (GMT) (envelope-from tillman@seekingfire.com) Received: from mail.seekingfire.com (caliban.seekingfire.com [24.72.123.45]) by mx1.FreeBSD.org (Postfix) with ESMTP id CFCBF43D55 for ; Mon, 17 Oct 2005 20:33:54 +0000 (GMT) (envelope-from tillman@seekingfire.com) Received: by mail.seekingfire.com (Postfix, from userid 500) id B656D21D; Mon, 17 Oct 2005 14:33:53 -0600 (CST) Date: Mon, 17 Oct 2005 14:33:53 -0600 From: Tillman Hodgson To: freebsd-isp@freebsd.org Message-ID: <20051017203353.GF33270@seekingfire.com> References: <20051012234337.K63956@zoraida.natserv.net> <57416b300510142221r2c3da329o65d54cb0aa04fc73@mail.gmail.com> <20051015133148.P97899@zoraida.natserv.net> <18f601940510151547ka3573f8v2f0633010ad2874f@mail.gmail.com> <20051016010251.R90770@zoraida.natserv.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20051016010251.R90770@zoraida.natserv.net> X-Habeas-SWE-1: winter into spring X-Habeas-SWE-2: brightly anticipated X-Habeas-SWE-3: like Habeas SWE (tm) X-Habeas-SWE-4: Copyright 2002 Habeas (tm) X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this X-Habeas-SWE-6: email in exchange for a license for this Habeas X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this X-Habeas-SWE-9: mark in spam to . X-GPG-Key-ID: 828AFC7B X-GPG-Fingerprint: 5584 14BA C9EB 1524 0E68 F543 0F0A 7FBC 828A FC7B X-GPG-Key: http://www.seekingfire.com/personal/gpg_key.asc X-Urban-Legend: There is lots of hidden information in headers X-Tillman-rules: yes he does User-Agent: Mutt/1.5.11 Subject: Re: Distributed authentication. Which one? X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Oct 2005 20:33:55 -0000 On Sun, Oct 16, 2005 at 01:04:08AM -0400, Francisco Reyes wrote: > >I would say LDAP, but then I've never used NIS. > > The general comment I am seeing in archives is that it is not commonly > used anymore. It has some interoperability and security issues. They're solvable, IMO. For example, most of the security concerns can be addressed with a combination of transport-mode IPsec and Kerberos and I avoid inter- operability issues by avoiding weird implementations of NIS ;-) -T -- "I once bought a cellphone that had a little sticker on the box that said 'DO NOT EAT PACKAGING MATERIAL'. There went another freebie snack at the office." - A.S.R. quote (Andreas "Buzh" Skau)