multihost master.passwd sync

Andy Harrison ah60 at httpsite.com
Tue May 27 11:30:28 PDT 2003


-----BEGIN PGP SIGNED MESSAGE-----


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 27-May-2003, Amit K. Rao wrote message "Re: multihost master.passwd sync"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> NIS  [yp(8)]  ?

Lord no...  even if you setup a backup nis server, an ailing master server can
really screw up your day.

I think I thought of a solution though.  root cronjob to pgp encrypt the file,
change perms so that it can be accessed by a user that is allowed to copy the
file to the target host.  The file is in encrypted using the public key of
root the target machine, so only root on the target will be able to pgp extract
the file.


~~ 
Andy Harrison
ah##@httpsite.com
ICQ: 123472  AIM/Y!: AHinMaine
[full headers for details]

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQCVAwUBPtOuz1PEkLgodAWVAQEupQQAhNGfV9yIg7jqM9D3VuPAfHy6XgcC0QnD
hPx5J0+uZZy9mpfBGSjn930To+YUFBZp+h/JcfX80rBFdTs+gSXk/olug7EWkhNp
6Uk+HazQeSN7347Rn5Ln0Pcagiv/Ua3zwQuXISJKxmUnHecufkMrOyc9wMtPbDwL
xmFl3gzrq38=
=HAT1
-----END PGP SIGNATURE-----


More information about the freebsd-security mailing list