Peter Arremann wrote: > > On Monday 24 September 2007, Steven Haigh wrote: > > Quoting Dan <likuidkewl at gmail.com>: > > NFS uses the user ID of the user (UID) for permissions. You > will need > > to have the correct permissions on each system, and the correct > > username associated with the same UID on each machine. > > > > If you are running multiple systems, I would suggest > looking into NIS. > > This will allow you to create the accounts in NIS and have them use > > the same details on each machine. > > Good answer but I can't agree on the NIS part.. NIS is plain > text over the > network and is deprecated for a long time. Sun is talking > about dropping > support, HP the same and even in the Linux camp there is some > talk about > taking NIS support out of the standard distributions. > Add to that the fact that ldap is becoming easier and easier > to set up, you > should probably look that way... NIS doesn't have to contain passwords, you can use Kerberos for authentication and still use NIS for user information, if you are worried about user names and uids going across in the clear you can use NIS+ and TLS. Improperly secured LDAP can have the same security issues as NIS. I would use whichever method works best for you, NIS or LDAP. You will find that a lot of the LDAP implementations are highly customized to each site, so figuring out what to use and what not to use can be a challenge, while NIS is pretty much standardized. I would use Kerberos for passwords though irrespective of the choice to use LDAP or NIS. -Ross ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.