Date: Sun, 20 Apr 1997 12:20:45 -0700 (MST) From: Terry Lambert <terry@lambert.org> To: vinay@agni.nuko.com (Vinay Bannai) Cc: freebsd-hackers@freebsd.org, freebsd-isp@freebsd.org Subject: Re: Need a common passwd file among machines Message-ID: <199704201920.MAA08341@phaeton.artisoft.com> In-Reply-To: <199704200512.WAA16052@agni.nuko.com> from "Vinay Bannai" at Apr 19, 97 10:12:54 pm
next in thread | previous in thread | raw e-mail | index | archive | help
> I need a common passwd file that is shared by a FreeBSD machine, Linux > machine, Solaris and a SunOS machine. I do not want to use NIS. Er, how about "YP". 8-) 8-). Alternately, you could download the LDAP or X.500 stuff, and hope it's not too green to work. 8-(. > I thought of using rdist to distribute the passwd file among all these > machines but could not because some of them use shadow passwd files and > others don't. Also, I am not sure the passwd encryption is the same on all > these platforms. If the password encryption is not the same on all the platforms, you can replace the authentication mechanism. A good place to look to check this (assuming X runs on all the platforms) is in the xdm sources form ftp.x.org. It will list and categorize the machine differences. Most likely, if you install the DES packages for the various platforms, they will all be using DES. Note that rdist will stomp password changes from the central server, so unless your users log into the central server (and potentially end up sending passwords in clear-text to the password change command on the server), the password changes will not "stick". This can be a real pain with an rdist-like system. > More generally, the reason I am using this approach is to make the > developement of code easier by using cvs. I have one machine exporting the > cvs source tree and others mount it. To keep the same uids, I need to > share the passwd files. Does anyone have a better suggestions? If you are in a zone where you are trusting NFS mounts, then you are in a zone where you can probably trust NIS. In either case, you will need a common authentication algorithm between all the machines, and that will probably be DES, if any of the machines are commercial platforms. Regards, Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199704201920.MAA08341>