Re: Using LDAP to share users among Linuxes

[Piet Ruyssinck <Piet.Ruyssinck@rug.ac.be>]

On Fri, May 14, 1999 at 04:12:02PM +0300, Tuomo Pyhala wrote:
> 
> I was wondering how to use LDAP to share user accounts between linux
> boxes. Does that make even any sense, should i just setup NIS? I've
> understood that maybe some other software could also use data in directory
> (for example FireWall-1 supports it?).
> 
> It seems like there would be open source components for all tasks, i need
> to download 
> 
> 1) OpenLDAP
> 2) nss-ldap module
> 3) pam-ldap module

Feel free to check out my PAM module :
http://allserv.rug.ac.be/~pruyss/pam_LDAP

> 4) Migration scripts
> 
> It seems that there are modules+migration scripts available at
> www.padl.com as well as at www.rage.net. Which one i should use? Does
> anyone know if i can implement anything like nis netgroups (mainly for
> grouping users reflecting organizational structure somewhat) when using
> these modules?
> 
> How about security, as far as i understand the ldap-solution doesn't
> hide hashed password from users? How could i implement hiding? 
> 
> I also noticed that there are problems compiling OpenLDAP with glibc-2.1
> included in RH 6.0 (Has been discussed this list before, strdup defined
> as a macro which conflicts with definition in openldap 1.2.1 sources). Is
> there a patch, or can i use precompiled binaries from local redhat contrib
> mirror?
> 

-- 
--------------------------------------------------------
Piet RUYSSINCK                  Piet.Ruyssinck@rug.ac.be
Unix Systeem Administratie                +32 9 264 4733
ACADEMISCH REKENCENTRUM (ARC)     Universiteit Gent (RUG)
Krijgslaan 281, gebouw S9, bureel 4     9000 Gent, Belgie