Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 13 Dec 1999 21:54:25 -0500 (EST)
From:      John Baldwin <jhb@FreeBSD.org>
To:        Jaime Kikpole <jaime@malkav.snowmoon.com>
Cc:        freebsd-questions@FreeBSD.org, Jeroen Ruigrok van der Werven <asmodai@bart.nl>, Alfred Perlstein <bright@wintelcom.net>
Subject:   Re: Merging 2 servers?
Message-ID:  <199912140254.VAA39913@server.baldwin.cx>
In-Reply-To: <Pine.BSF.4.10.9912130858560.55838-100000@malkav.snowmoon.com>

next in thread | previous in thread | raw e-mail | index | archive | help

On 13-Dec-99 Jaime Kikpole wrote:
>> Then again having them all on one machine helps because students
>> and teachers could be put in class groups to allow them access
>> to common areas.
> 
>       This was one of the reasons that I began to consider the merge. We
> have two compies of a web-based password changing program, two copies of
> TWIG (web email program), two copies of the email address lookup CGI that
> I wrote, and so on.

Yes, but they are the same program, so it's just a simple cp/ftp/rcp/scp
operation.  I'd say the redundancy is worth it.

>> Perhaps keeping the split, but making sure that teachers have logins
>> on the student machine would be the most flexible, you can probably
>> use NIS to keep the passwords and account information sync'd
>> for the teacher accounts.
> 
>       Is it possible to use NIS to sync only part of the password
> database?  Is it possible to use NIS to sync usernames, passwords, and
> home directories (which would be shared via NFS) and then change the shell
> depending on the server?  Specifically, I'm thinking of using
> /usr/bin/false for their shells on one server and then adding a
> "programming server" which allowed them to use bash, zsh, tcsh, etc. so
> that they can test out programs without being able to crack at the server
> quite so easily.

Yes.

+@admins::::::
+:NoLogin:::::

Those two entries from a server I admin allow all of the information for
administrators, but changes the encrypted password of everyone else to
'NoLogin', effectively blocking logins.  I couldn't change the shell because
sendmail runs on this server and needs valid shells to be able to run procmail
in .forward's.

>       Thanks for the pointers so far!
> 
>                                               Jaime

Good luck.

-- 

John Baldwin <jhb@FreeBSD.org> -- http://www.FreeBSD.org/~jhb/
PGP Key: http://www.cslab.vt.edu/~jobaldwi/pgpkey.asc
"Power Users Use the Power to Serve!"  -  http://www.FreeBSD.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199912140254.VAA39913>