Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 8 Sep 2003 22:28:17 -0500
From:      Dan Nelson <dnelson@allantgroup.com>
To:        Tillman Hodgson <tillman@seekingfire.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: nis security
Message-ID:  <20030909032816.GN48339@dan.emsphone.com>
In-Reply-To: <20030908181529.P11841@seekingfire.com>
References:  <200309082359.07548.ajacoutot@lphp.org> <20030908161045.C11841@seekingfire.com> <42065386.1063047726@[192.168.10.11]> <20030908181529.P11841@seekingfire.com>

next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Sep 08), Tillman Hodgson said:
> > > I'm a bit biased, however: I use NIS with Kerberos and think it's the
> > > cats pajamas :-)
> >
> > This sounds exactly like what we are looking for. Can you point us
> > to any docs explaining how you do this??
> 
> The rough instructions are fairly simple:
> 
> * Set up Kerberos and ensure you have a working realm
> * Set up NIS, but set all the passwd fields to something that doesn't
>   map to a real password (I like 'krb5', others like '*')

You can do something similar with LDAP, by using pam_ldap for
authentication and NIS for the rest of the user info lookup.

-- 
	Dan Nelson
	dnelson@allantgroup.com



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030909032816.GN48339>