Network authentication for UNIX and Linux

Derek Atkins warlord-DPNOqEs/LNQ at public.gmane.org
Wed Oct 27 11:29:17 EDT 2010


Mark Woodward <markw-FJ05HQ0HCKaWd6l5hS35sQ at public.gmane.org> writes:

> Windows uses "Active Directory" for domain management. If you don't know 
> what that is, its Microsoft's domain system that was rewritten around a 
> set of services with ldap.
>
> What would be the equivalent under UNIX/Linux? Is NIS the standard, if 
> so, really?!?

LDAP + Kerberos.

LDAP provides the /etc/passwd information; Kerberos provides the
authentication.  Theoretically you could put the /etc/shadow password
information into LDAP, but then you're shipping hashed passwords over
the network which some might consider insecure.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord-DPNOqEs/LNQ at public.gmane.org                        PGP key available





More information about the Discuss mailing list