RE: LDAP vs SQL

["Luke Howard" <lukeh@xedoc.com.au>]

> doesn't seem to be much advantage to using LDAP over a regular SQL
> database. Generating the whole password file sounds kinda
> risky anyhow.
> What if there were a crash as it was half written? At least
> root would be
> first.

You could update the password file atomically if you so wished, just like
vipw does. For example, you could dump users from LDAP into a temporary
file, and then move the temporary file to /etc/passwd.

Anyway, I suggest you give nss_ldap a whirl before attempting such
(available from http://www.xedoc.com.au/~lukeh/ldap; between
openldap-general and pam-list, I seem to have spent most of today typing
that URL!).



-- Luke