Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 May 2003 14:30:41 -0400 (EDT)
From:      Andy Harrison <ah60@httpsite.com>
To:        freebsd-security@freebsd.org
Subject:   Re: multihost master.passwd sync
Message-ID:  <XFMail.20030527143041.ah60@httpsite.com>
In-Reply-To: <200305271413.51090.fbsd@atyantik.net>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 27-May-2003, Amit K. Rao wrote message "Re: multihost master.passwd sync"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> NIS  [yp(8)]  ?

Lord no...  even if you setup a backup nis server, an ailing master server can
really screw up your day.

I think I thought of a solution though.  root cronjob to pgp encrypt the file,
change perms so that it can be accessed by a user that is allowed to copy the
file to the target host.  The file is in encrypted using the public key of
root the target machine, so only root on the target will be able to pgp extract
the file.


~~ 
Andy Harrison
ah##@httpsite.com
ICQ: 123472  AIM/Y!: AHinMaine
[full headers for details]

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBPtOuz1PEkLgodAWVAQEupQQAhNGfV9yIg7jqM9D3VuPAfHy6XgcC0QnD
hPx5J0+uZZy9mpfBGSjn930To+YUFBZp+h/JcfX80rBFdTs+gSXk/olug7EWkhNp
6Uk+HazQeSN7347Rn5Ln0Pcagiv/Ua3zwQuXISJKxmUnHecufkMrOyc9wMtPbDwL
xmFl3gzrq38=
=HAT1
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.20030527143041.ah60>