-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

FACORAT Fabrice wrote:
> Le mar 12/08/2003 � 16:27, Buchan Milne a �crit :
>
>
>>It's not the look that needs to be addressed, it's the management of
>>thousand's of desktops (ie NDS/AD for linux), and storing msec config
>>and urpmi config in ldap could be a good way to start ... (ie ability to
>>automate/delegate sofware installation, and ability to lock-down
>>security en-masse).
>
> and this you are going to put this only on server edition and use maybe
> special msec/urpmi version because using this on a desktop PC is
> heavy/inefficient. I can hear complain about the fact LDAP is launch by
> default, etc ...

????

Do you know what Group Policy Objects are? That is the kind of thing
that needs to be implemented. Of course it would have no effect on
standalone machines, it would only take effect if the machine is
configured for ldap authentication.

Or maybe you have a better way for ensuring that 20000 desktops don't
show user icons in kdm/mdkkdm, don't allow remote root login, only allow
members of wheel to su, some machines have commercial packages, some not
etc etc?

autofs has LDAP support, and I don't see anyone complaining that we
should throw it out just in case a single user installs it by mistake?

Regards,
Buchan

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/OTU2rJK6UGDSBKcRAnDhAKDGQ1mz+XipNjJZ/eACRzt6AQh6nwCcD+mh
+aNP38AgreZ+JXEPz3LpCw8=
=/ZNi
-----END PGP SIGNATURE-----

******************************************************************
Please click on http://www.cae.co.za/disclaimer.htm to read our
e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy.
******************************************************************

Reply via email to