multihost master.passwd sync

Bill Swingle unfurl at dub.net
Fri Jun 20 10:15:00 PDT 2003


This is a way late reply but I've had wonderful success with using NIS
for distributing user info (but *'ing out the passwords) then using
kerberos for authentication. Dunno if that helps.

-Bill

On Wed, May 28, 2003 at 09:36:27AM +0300, Peter Pentchev wrote:
> On Wed, May 28, 2003 at 09:35:17AM +0300, Peter Pentchev wrote:
> > On Tue, May 27, 2003 at 01:46:37PM -0400, Andy Harrison wrote:
> > > 
> > > Just wondered if anyone had any suggestions about syncing up master.passwd
> > > files between multiple machines that didn't involve allowing root login
> > > remotely?  The users need to be able to log in remotely and own files on the
> > > different machines.
> > 
> > People have mentioned LDAP; I am truly surprised no one has mentioned
> > Kerberos yet.
> 
> Oh wait, nevermind.  That's what I get for posting before coffee;
> Kerberos still needs some way of telling the system that there is
> such a user in the first place.
> 
> G'luck,
> Peter
> 
> -- 
> Peter Pentchev	roam at ringlet.net    roam at sbnd.net    roam at FreeBSD.org
> PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
> Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
> This sentence contradicts itself - or rather - well, no, actually it doesn't!



-- 
-=| Bill Swingle - <unfurl@(dub.net|freebsd.org)>
-=| Every message PGP signed
-=| PGP Fingerprint: C1E3 49D1 EFC9 3EE0 EA6E  6414 5200 1C95 8E09 0223
-=| "Computers are useless. They can only give you answers" Pablo Picasso 



-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20030620/210fb681/attachment.bin


More information about the freebsd-security mailing list