[CentOS] NIS or not?

[anax]

Hi Sorin
we use here LDAP  authentication and mail-control since more than 10 years.
At that time, we did the conversion from passwd/shadow to LDAP using the 
tools on
http://www.padl.com/download/
which are still available, probably in a newer version...

To represent a person or a service in LDAP we use the objectclasses:
  objectClass: account
  objectClass: posixAccount
  objectClass: top
  objectClass: shadowAccount
  objectClass: mailRecipient

To represent a mail user for postfix we use the objectlcasses:

  objectClass: top
  objectClass: person
  objectClass: organizationalPerson
  objectClass: inetOrgPerson
  objectClass: qmailUser

To represent a Domain which we serve mail-wise we use the objectclasses:
objectClass: qmailControl
objectClass: top


We also have developed an LDAP via Web Interface, which we use 
exclusively for LDAP administration.

We have two LDAP servers, syncronized via syncrepl.

suomi



On 2014-01-28 10:02, Sorin Srbu wrote:
> Hi all,
>
> We're getting to a point in our linux environment where it's starting to be
> cumbersome to keep shadow and passwd-files up-to-date for the users to login
> on each computer. Scripts can only get us so far. 8-/
>
> I've looked a bit into central login systems for linux, and NIS and LDAP seem
> to be prevalent. NIS being the simpler-to-setup solution for small to medium
> networks as I understand it, while LDAP is the more modern and scalable
> solution.
> See eg http://www.yolinux.com/TUTORIALS/NIS.html or
> http://sysadmin-notepad.blogspot.se/2013/06/nis-server-setup-on-rhelcentos.html.
>
> NIS-wise, what is a "small to medium network"?
> We have currently about 20-30'ish linux clients and servers, and the
> environment is not likely to increase much beyond this point.
> Is a 30ish-computer setup, a small network?
>
> The only thing I'm trying to accomplish is a system which will allow me to
> keep user accounts and passwords in one place, with one place only to
> administrate. NIS seems to be able to do that.
>
> Comments and insights are much appreciated!
>
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>