[gentoo-user] NIS configuration

[gentoo-user] NIS configuration

[Leandro Melo de Sales]

Hi!

  I configured my gentoo server box to authenticate users through LDAP
(nsswicth+pam_ldap). Everything are working fine and now I want to run
a ypserv and as a result I want the nis clients authenticating against
my server. I following the instructions in
http://gentoo-wiki.com/HOWTO_Setup_NIS but the clients (gentoo and
ubuntu boxes) don't find the ypserver, any clue?
  I was planning to make the clients authentication directly to LDAP
server, but in this case I have to install pam_ldap and create a
/etc/ldap.conf and put ldap bindpw into this file or in
/etc/ldap.secret. Even if I protect it with 600 the use can get this
file installing a windows application (the client machines have dual
boot) that read ext3 partitions and read the files, finally getting
the bindpw. Any comment about this? Am I thinking wrong about that?

Thank you. BTW, all suggestion will be greatfully accepted.

Leandro.

-- 
Leandro Melo de Sales.
Computer Science MSc Candidate
Distributed System Lab - lsd.ufcg.edu.br
Pervasive Computing Lab - embedded.ufcg.edu.br
Universidade Federal de Campina Grande - UFCG
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] NIS configuration

[Bryan Whitehead]

If you are worried about the users getting the ldap bind password - then 
why on earth would you bother with NIS? NIS has no password to block 
binding at all! At least ldap has a binding password...

On Tue, 22 Aug 2006, Leandro Melo de Sales wrote:

> Hi!
>
> I configured my gentoo server box to authenticate users through LDAP
> (nsswicth+pam_ldap). Everything are working fine and now I want to run
> a ypserv and as a result I want the nis clients authenticating against
> my server. I following the instructions in
> http://gentoo-wiki.com/HOWTO_Setup_NIS but the clients (gentoo and
> ubuntu boxes) don't find the ypserver, any clue?
> I was planning to make the clients authentication directly to LDAP
> server, but in this case I have to install pam_ldap and create a
> /etc/ldap.conf and put ldap bindpw into this file or in
> /etc/ldap.secret. Even if I protect it with 600 the use can get this
> file installing a windows application (the client machines have dual
> boot) that read ext3 partitions and read the files, finally getting
> the bindpw. Any comment about this? Am I thinking wrong about that?
>
> Thank you. BTW, all suggestion will be greatfully accepted.
>
> Leandro.
>
>

-- 
Bryan Whitehead
Email:driver@megahappy.net
-- 
gentoo-user@gentoo.org mailing list