OT: Directory Services and linux

OT: Directory Services and linux

[Alex Snow]

Hi,

Have a few  linux machines running here that I'd like to have running a 
directory service to synchronise login information and the like.  I was 
just wondering, what's the best directory service to run these days? I 
had to take an intro to Unix class for school, and that mentioned NIS, 
which I had looked into in the past...though I just read the ORielly 
book on that and it seemed to say that NIS should only be used until 
newer alternatives became stable, and the book was about 5 years old.  
Being able to interoperate with windows hosts would be nice also, though 
I'm not holding my breath...
Any help would be apreciated.

-- 
quit   When the quit statement is read, the  bc  processor
       is  terminated, regardless of where the quit state-
       ment is found.  For example, "if  (0  ==  1)  quit"
       will cause bc to terminate.
	-- seen in the manpage for "bc". Note the "if" statement's logic

Re: Directory Services and linux

[Doug Sutherland]

NIS is still the standard used in most unix networks, including 
Solaris where it was born, actually on the predecessor SunOS.
Sun creaited NIS+ as a successor but it never gained ground 
over NIS. You can't really go wrong with NIS, it is still the 
most widely supported naming service after DNS. 

  -- Doug

Re: OT: Directory Services and linux

[Terry Klarich]

You want to look at openldap.  I am running it here on my personal network.  Id's are shared among all my machines, samba accounts
and html accounts.  Works well.

Terry
On Sun, 27 May 2007 18:55:59 -0400you write:
>Hi,
>
>Have a few  linux machines running here that I'd like to have running a 
>directory service to synchronise login information and the like.  I was 
>just wondering, what's the best directory service to run these days? I 
>had to take an intro to Unix class for school, and that mentioned NIS, 
>which I had looked into in the past...though I just read the ORielly 
>book on that and it seemed to say that NIS should only be used until 
>newer alternatives became stable, and the book was about 5 years old.  
>Being able to interoperate with windows hosts would be nice also, though 
>I'm not holding my breath...
>Any help would be apreciated.
>
>-- 
>quit   When the quit statement is read, the  bc  processor
>       is  terminated, regardless of where the quit state-
>       ment is found.  For example, "if  (0  ==  1)  quit"
>       will cause bc to terminate.
>	-- seen in the manpage for "bc". Note the "if" statement's logic
>
>_______________________________________________
>Speakup mailing list
>Speakup@braille.uwo.ca
>http://speech.braille.uwo.ca/mailman/listinfo/speakup
>

Re: Directory Services and linux

[Terry Klarich]

You can use NIS if you want to open up your systems.  Nis has more holes in it than a screen door.  It's actually worse than
sendmail.

Use ldap.

Terry
On Sun, 27 May 2007 19:17:53 -0500you write:
>NIS is still the standard used in most unix networks, including 
>Solaris where it was born, actually on the predecessor SunOS.
>Sun creaited NIS+ as a successor but it never gained ground 
>over NIS. You can't really go wrong with NIS, it is still the 
>most widely supported naming service after DNS. 
>
>  -- Doug
>
>_______________________________________________
>Speakup mailing list
>Speakup@braille.uwo.ca
>http://speech.braille.uwo.ca/mailman/listinfo/speakup
>

Re: Directory Services and linux

[Alex Snow]

Yeah I was thinking about looking into ldap...the O'Rielly book I read 
on Nis said that when it became stable ldap would be the best choice 
since Nis was rather insecure and nis+ never really took off.

Thanks for the info, I'll give openldap a try...
On Thu, May 
31, 2007 at 12:44:02PM -0500, Terry Klarich wrote:
> You can use NIS if you want to open up your systems.  Nis has more holes in it than a screen door.  It's actually worse than
> sendmail.
> 
> Use ldap.
> 
> Terry
> On Sun, 27 May 2007 19:17:53 -0500you write:
> >NIS is still the standard used in most unix networks, including 
> >Solaris where it was born, actually on the predecessor SunOS.
> >Sun creaited NIS+ as a successor but it never gained ground 
> >over NIS. You can't really go wrong with NIS, it is still the 
> >most widely supported naming service after DNS. 
> >
> >  -- Doug
> >
> >_______________________________________________
> >Speakup mailing list
> >Speakup@braille.uwo.ca
> >http://speech.braille.uwo.ca/mailman/listinfo/speakup
> >
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-- 
lp1 on fire
	-- One of the more obfuscated kernel messages

Re: OT: Directory Services and linux

[Steve Holmes]

Is there some good documentation on LDAP? When I looked at the
documentation that came with openldap, I got lost in the weeds,
overwelmed and my head was swimming.  For whatever reason, it just
looked like complete over-kill to me.  I really don't have a good
grasp on what LDAP can do for me.  I originally thought it was a
litteral directory server like for mail and address books; that was
probably my first mistake.:)

On Thu, May 31, 2007 at 12:40:53PM -0500, Terry Klarich wrote:
> You want to look at openldap.  I am running it here on my personal network.  Id's are shared among all my machines, samba accounts
> and html accounts.  Works well.
> 
> Terry
> On Sun, 27 May 2007 18:55:59 -0400you write:
> >Hi,
> >
> >Have a few  linux machines running here that I'd like to have running a 
> >directory service to synchronise login information and the like.  I was 
> >just wondering, what's the best directory service to run these days? I 
> >had to take an intro to Unix class for school, and that mentioned NIS, 
> >which I had looked into in the past...though I just read the ORielly 
> >book on that and it seemed to say that NIS should only be used until 
> >newer alternatives became stable, and the book was about 5 years old.  
> >Being able to interoperate with windows hosts would be nice also, though 
> >I'm not holding my breath...
> >Any help would be apreciated.
> >
> >-- 
> >quit   When the quit statement is read, the  bc  processor
> >       is  terminated, regardless of where the quit state-
> >       ment is found.  For example, "if  (0  ==  1)  quit"
> >       will cause bc to terminate.
> >	-- seen in the manpage for "bc". Note the "if" statement's logic
> >
> >_______________________________________________
> >Speakup mailing list
> >Speakup@braille.uwo.ca
> >http://speech.braille.uwo.ca/mailman/listinfo/speakup
> >
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-- 
HolmesGrown Solutions
The best solutions for the best price!
http://holmesgrown.ld.net/

Re: OT: Directory Services and linux

[Terry Klarich]

LDAP is not something you can setup in a few minutes.  And, it might be over kill for you.  However, there is no other real options
which are secure.  In my case, I built an ldap solution for my employer; so, have been through the learning curve.  I use it for my
home network.  It consists of 4 unix and 3 windows machines.  I wanted to have a single password for all authentication processes.
So far, all unix accounts, samba and web access share the same password.  Put on your climbing equipment because the learning curve
is straight up.

If you go to http://tldp.org/HOWTO/LDAP-HOWTO/ you can find a step by step approach to install ldap.  I'd be willing to assist if I
can.

Terry
On Tue, 5 Jun 2007 12:36:58 -0700you write:
>Is there some good documentation on LDAP? When I looked at the
>documentation that came with openldap, I got lost in the weeds,
>overwelmed and my head was swimming.  For whatever reason, it just
>looked like complete over-kill to me.  I really don't have a good
>grasp on what LDAP can do for me.  I originally thought it was a
>litteral directory server like for mail and address books; that was
>probably my first mistake.:)
>
>On Thu, May 31, 2007 at 12:40:53PM -0500, Terry Klarich wrote:
>> You want to look at openldap.  I am running it here on my personal network.  Id's are shared among all my machines, samba accoun
>ts
>> and html accounts.  Works well.
>> 
>> Terry
>> On Sun, 27 May 2007 18:55:59 -0400you write:
>> >Hi,
>> >
>> >Have a few  linux machines running here that I'd like to have running a 
>> >directory service to synchronise login information and the like.  I was 
>> >just wondering, what's the best directory service to run these days? I 
>> >had to take an intro to Unix class for school, and that mentioned NIS, 
>> >which I had looked into in the past...though I just read the ORielly 
>> >book on that and it seemed to say that NIS should only be used until 
>> >newer alternatives became stable, and the book was about 5 years old.  
>> >Being able to interoperate with windows hosts would be nice also, though 
>> >I'm not holding my breath...
>> >Any help would be apreciated.
>> >
>> >-- 
>> >quit   When the quit statement is read, the  bc  processor
>> >       is  terminated, regardless of where the quit state-
>> >       ment is found.  For example, "if  (0  ==  1)  quit"
>> >       will cause bc to terminate.
>> >	-- seen in the manpage for "bc". Note the "if" statement's logic
>> >
>> >_______________________________________________
>> >Speakup mailing list
>> >Speakup@braille.uwo.ca
>> >http://speech.braille.uwo.ca/mailman/listinfo/speakup
>> >
>> 
>> _______________________________________________
>> Speakup mailing list
>> Speakup@braille.uwo.ca
>> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>
>-- 
>HolmesGrown Solutions
>The best solutions for the best price!
>http://holmesgrown.ld.net/
>
>_______________________________________________
>Speakup mailing list
>Speakup@braille.uwo.ca
>http://speech.braille.uwo.ca/mailman/listinfo/speakup
>