From owner-freebsd-isp@FreeBSD.ORG  Sat Oct 15 17:33:26 2005
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
X-Original-To: freebsd-isp@freebsd.org
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DA1DC16A41F
	for <freebsd-isp@freebsd.org>; Sat, 15 Oct 2005 17:33:26 +0000 (GMT)
	(envelope-from lists@natserv.com)
Received: from zoraida.natserv.net (p65-147.acedsl.com [66.114.65.147])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7B7BB43D53
	for <freebsd-isp@freebsd.org>; Sat, 15 Oct 2005 17:33:26 +0000 (GMT)
	(envelope-from lists@natserv.com)
Received: from localhost (localhost.natserv.net [127.0.0.1])
	by zoraida.natserv.net (Postfix) with ESMTP id A90D77DBF;
	Sat, 15 Oct 2005 13:33:25 -0400 (EDT)
Date: Sat, 15 Oct 2005 13:33:25 -0400 (EDT)
From: Francisco Reyes <lists@natserv.com>
X-X-Sender: fran@zoraida.natserv.net
To: Peter Clutton <peterclutton@gmail.com>
In-Reply-To: <57416b300510142221r2c3da329o65d54cb0aa04fc73@mail.gmail.com>
Message-ID: <20051015133148.P97899@zoraida.natserv.net>
References: <20051012234337.K63956@zoraida.natserv.net>
	<57416b300510142221r2c3da329o65d54cb0aa04fc73@mail.gmail.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: FreeBSD ISP list <freebsd-isp@freebsd.org>
Subject: Re: Distributed authentication. Which one?
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 15 Oct 2005 17:33:27 -0000

On Fri, 14 Oct 2005, Peter Clutton wrote:

> Well questions of which one are all a matter of opinion. LDAP is an
> established implementation of the .x500 standard, and the open version
> OpenLDAP can run with a mysql backend. It sounds like it would fulfil
> your needs.

Will take a look.

> Kerberos is an authentication protocol rather than a directory

So Kerberos would be more along the lines of users login in to the 
machines?

> service, and NIS is a simple directory service introduced by Sun.

Between LDAP and NIS which one would you consider to be:
1- More secure
2- Easier to maintain