After dealing with a couple of issues with OpenLDAP, I&#39;d say it beats the piss out of NIS all day long.  NIS is ancient and decrepit.<br><br>Hard to believe, but certain very well known organizations refuse to get off NIS for critical and secure systems.<br>
<br>Peter<br><br><div class="gmail_quote">On Thu, Dec 17, 2009 at 11:50 AM, John R. Dennison <span dir="ltr">&lt;<a href="mailto:jrd@gerdesas.com">jrd@gerdesas.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="im">On Thu, Dec 17, 2009 at 12:44:54PM -0700, <a href="mailto:m.roth@5-cent.us">m.roth@5-cent.us</a> wrote:<br>
&gt;<br>
&gt; Not one you want to hear: ditch NIS. It&#39;s known to have a *lot* of<br>
&gt; security holes. At the very least, NIS+. Better would be either RH<br>
<br>
</div>        Out of curiousity, can you point me to writeups of known working<br>
        exploits against current yp-family versions on CentOS?<br>
<br>
        NIS+ is not, the last time I checked, available for Linux; if<br>
        my understanding is in error I would very much welcome<br>
        correction.<br>
<br>
<br>
<br>
<br>
                                                        John<br>
<font color="#888888"><br>
--<br>
We cannot do everything at once, but we can do something at once.<br>
<br>
-- Calvin Coolidge (1872-1933), 30th president of the United States<br>
</font><br>_______________________________________________<br>
CentOS mailing list<br>
<a href="mailto:CentOS@centos.org">CentOS@centos.org</a><br>
<a href="http://lists.centos.org/mailman/listinfo/centos" target="_blank">http://lists.centos.org/mailman/listinfo/centos</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Peter Serwe<br><a href="http://truthlightway.blogspot.com/">http://truthlightway.blogspot.com/</a><br>