Re: [CentOS] NIS or not?

2014-01-29 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jeffrey Hass Sent: den 29 januari 2014 08:47 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Hi friend - what is your end goal with this effort to obtain security

Re: [CentOS] NIS or not?

2014-01-29 Thread John R Pierce
On 1/28/2014 4:45 AM, Sorin Srbu wrote: Use IPA. It combines LDAP with Kerberos, a server-client environment is easily setup and the documentation (RHEL deployment) is very helpful. Thank you. I'll look it up. LDAP and Kerberos though. That does sound a lot like Microsoft Active

Re: [CentOS] NIS or not?

2014-01-29 Thread Jeffrey Hass
did my community service for the day. Wizard of Hass! On 1/29/2014 12:11 AM, Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jeffrey Hass Sent: den 29 januari 2014 08:47 To: CentOS mailing list Subject: Re: [CentOS

Re: [CentOS] NIS or not?

2014-01-29 Thread Rob Kampen
On 01/29/2014 09:44 PM, John R Pierce wrote: On 1/28/2014 4:45 AM, Sorin Srbu wrote: Use IPA. It combines LDAP with Kerberos, a server-client environment is easily setup and the documentation (RHEL deployment) is very helpful. Thank you. I'll look it up. LDAP and Kerberos though. That does

Re: [CentOS] NIS or not?

2014-01-29 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jeffrey Hass Sent: den 29 januari 2014 09:49 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Good call - not sure how far your coding goes and with what/how languages

Re: [CentOS] NIS or not?

2014-01-29 Thread Jeffrey Hass
09:49 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Good call - not sure how far your coding goes and with what/how languages and scripts... Make sure to have as much as possible on VM's related to your security 'servers' -- so that you also get a virtual built in Disaster

Re: [CentOS] NIS or not?

2014-01-29 Thread Jeffrey Hass
experience. Most. ~ later. j/h On 1/29/2014 1:49 AM, Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jeffrey Hass Sent: den 29 januari 2014 09:49 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Good

Re: [CentOS] NIS or not?

2014-01-29 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jeffrey Hass Sent: den 29 januari 2014 11:11 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Almost forgot, //Sorin: SSL uses public key cryptography: 1. You (or your

Re: [CentOS] NIS or not?

2014-01-29 Thread Devin Reade
--On Tuesday, January 28, 2014 12:45:09 PM + Sorin Srbu sorin.s...@orgfarm.uu.se wrote: LDAP and Kerberos though. That does sound a lot like Microsoft Active Directory. 8-) No, the other way around. Microsoft Active Directory sounds a lot like LDAP and Kerberos. Credit where credit is

Re: [CentOS] NIS or not?

2014-01-29 Thread Joseph L. Casale
No, the other way around. Microsoft Active Directory sounds a lot like LDAP and Kerberos. Credit where credit is due ... No, the other way around. Microsoft Active Directory implements an LDAP like directory accessible interface for its own directory. Calling Active Directory LDAP is like

Re: [CentOS] NIS or not?

2014-01-29 Thread Jeffrey Hass
brilliant. exactly. On 1/29/2014 2:24 PM, Joseph L. Casale wrote: No, the other way around. Microsoft Active Directory sounds a lot like LDAP and Kerberos. Credit where credit is due ... No, the other way around. Microsoft Active Directory implements an LDAP like directory accessible

Re: [CentOS] NIS or not?

2014-01-29 Thread John R Pierce
On 1/29/2014 2:24 PM, Joseph L. Casale wrote: No, the other way around. Microsoft Active Directory implements an LDAP like directory accessible interface for its own directory. Calling Active Directory LDAP is like calling vim `echo xx yy`. If you are unaware of all the moving parts under

Re: [CentOS] NIS or not?

2014-01-29 Thread Joseph L. Casale
AD *is* a modified/extended LDAP+Kerberos based system, it just adds a ton more proprietary stuff around it to manage Windows workstations, the whole Group Policy Object stuff etc etc. Thats all implemented via LDAP extensions. I'm sorry, with all due respect I disagree. There is an

Re: [CentOS] NIS or not?

2014-01-29 Thread John R Pierce
On 1/29/2014 3:17 PM, Joseph L. Casale wrote: I'm sorry, with all due respect I disagree. There is an unfathomable quantity of functionality not accessible via LDAP. You can query some aspects made available through the LDAP interface, you cannot set nor modify plenty. indeed, as I said,

Re: [CentOS] NIS or not?

2014-01-29 Thread Jeffrey Hass
Pretty much rightand is not truly X.500 compliant...This AD. It makes me nervous when one refers to it as LDAP...heh. Do a low level trace when running: ldapsearch .. Problem is AD has to be dealt with until Microsoft dies! Becomes Novell. And it will someday Anyway The LDAP with

[CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
Hi all, We're getting to a point in our linux environment where it's starting to be cumbersome to keep shadow and passwd-files up-to-date for the users to login on each computer. Scripts can only get us so far. 8-/ I've looked a bit into central login systems for linux, and NIS and LDAP seem

Re: [CentOS] NIS or not?

2014-01-28 Thread anax
Hi Sorin we use here LDAP authentication and mail-control since more than 10 years. At that time, we did the conversion from passwd/shadow to LDAP using the tools on http://www.padl.com/download/ which are still available, probably in a newer version... To represent a person or a service in

Re: [CentOS] NIS or not?

2014-01-28 Thread Darod Zyree
2014-01-28 Sorin Srbu sorin.s...@orgfarm.uu.se Hi all, We're getting to a point in our linux environment where it's starting to be cumbersome to keep shadow and passwd-files up-to-date for the users to login on each computer. Scripts can only get us so far. 8-/ I've looked a bit into

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of anax Sent: den 28 januari 2014 12:24 To: centos@centos.org Subject: Re: [CentOS] NIS or not? Hi Sorin we use here LDAP authentication and mail-control since more than 10 years

Re: [CentOS] NIS or not?

2014-01-28 Thread anax
the mail. suomi On 2014-01-28 13:32, Sorin Srbu wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of anax Sent: den 28 januari 2014 12:24 To: centos@centos.org Subject: Re: [CentOS] NIS or not? Hi Sorin we use here LDAP

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Darod Zyree Sent: den 28 januari 2014 13:00 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Use IPA. It combines LDAP with Kerberos, a server-client environment is easily

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of anax Sent: den 28 januari 2014 13:45 To: centos@centos.org Subject: Re: [CentOS] NIS or not? Hi Sorin of course: you may omit the mail cocacho and realize only the authentication

Re: [CentOS] NIS or not?

2014-01-28 Thread Pete Geenhuizen
On 01/28/2014 04:02 AM, Sorin Srbu wrote: Hi all, We're getting to a point in our linux environment where it's starting to be cumbersome to keep shadow and passwd-files up-to-date for the users to login on each computer. Scripts can only get us so far. 8-/ I've looked a bit into central

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Pete Geenhuizen Sent: den 28 januari 2014 14:12 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? I used NIS for many years while working on Sun Solaris and it worked

Re: [CentOS] NIS or not?

2014-01-28 Thread Kaplan, Andrew H.
[mailto:centos-boun...@centos.org] On Behalf Of Sorin Srbu Sent: Tuesday, January 28, 2014 4:03 AM To: CentOS mailing list Subject: [CentOS] NIS or not? Hi all, We're getting to a point in our linux environment where it's starting to be cumbersome to keep shadow and passwd-files up-to-date

Re: [CentOS] NIS or not?

2014-01-28 Thread Logan McNaughton
, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Pete Geenhuizen Sent: den 28 januari 2014 14:12 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? I used NIS for many years

Re: [CentOS] NIS or not?

2014-01-28 Thread Pete Geenhuizen
Security is a major consideration, and even though as you say most of the traffic is local, most problems are internal as opposed to external. Pete On 01/28/2014 08:22 AM, Sorin Srbu wrote: Yeah, that last bit made me squirm over here. I don't feel good about that, even though the linux

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Kaplan, Andrew H. Sent: den 28 januari 2014 14:31 To: 'CentOS mailing list' Subject: Re: [CentOS] NIS or not? We have been using NIS for over a decade on our network, and it has been

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Logan McNaughton Sent: den 28 januari 2014 14:33 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Where I work we use NIS + Kerberos (Active Directory). We have about 150

Re: [CentOS] NIS or not?

2014-01-28 Thread Mauricio Tavares
On Tue, Jan 28, 2014 at 8:56 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Logan McNaughton Sent: den 28 januari 2014 14:33 To: CentOS mailing list Subject: Re: [CentOS] NIS

Re: [CentOS] NIS or not?

2014-01-28 Thread Matt Garman
On Tue, Jan 28, 2014 at 3:02 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: The only thing I'm trying to accomplish is a system which will allow me to keep user accounts and passwords in one place, with one place only to administrate. NIS seems to be able to do that. Comments and insights are

Re: [CentOS] NIS or not?

2014-01-28 Thread Laurent Wandrebeck
Matt Garman matthew.gar...@gmail.com a écrit : On Tue, Jan 28, 2014 at 3:02 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: The only thing I'm trying to accomplish is a system which will allow me to keep user accounts and passwords in one place, with one place only to administrate. NIS seems

Re: [CentOS] NIS or not?

2014-01-28 Thread Darod Zyree
2014-01-28 Laurent Wandrebeck l.wandreb...@quelquesmots.fr Matt Garman matthew.gar...@gmail.com a écrit : On Tue, Jan 28, 2014 at 3:02 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: The only thing I'm trying to accomplish is a system which will allow me to keep user accounts and

Re: [CentOS] NIS or not?

2014-01-28 Thread Mauricio Tavares
On Tue, Jan 28, 2014 at 9:47 AM, Darod Zyree darodzy...@gmail.com wrote: 2014-01-28 Laurent Wandrebeck l.wandreb...@quelquesmots.fr Matt Garman matthew.gar...@gmail.com a écrit : On Tue, Jan 28, 2014 at 3:02 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: The only thing I'm trying to

Re: [CentOS] NIS or not?

2014-01-28 Thread Darod Zyree
2014-01-28 Mauricio Tavares raubvo...@gmail.com On Tue, Jan 28, 2014 at 9:47 AM, Darod Zyree darodzy...@gmail.com wrote: 2014-01-28 Laurent Wandrebeck l.wandreb...@quelquesmots.fr Matt Garman matthew.gar...@gmail.com a écrit : On Tue, Jan 28, 2014 at 3:02 AM, Sorin Srbu

Re: [CentOS] NIS or not?

2014-01-28 Thread m . roth
Laurent Wandrebeck wrote: Matt Garman matthew.gar...@gmail.com a écrit : On Tue, Jan 28, 2014 at 3:02 AM, Sorin Srbu sorin.s...@orgfarm.uu.se wrote: The only thing I'm trying to accomplish is a system which will allow me to keep user accounts and passwords in one place, with one place only to

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Mauricio Tavares Sent: den 28 januari 2014 15:20 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? We do have Active Directory as well, but only for the Windows clients

Re: [CentOS] NIS or not?

2014-01-28 Thread m . roth
Sorin Srbu wrote: Behalf Of Mauricio Tavares We do have Active Directory as well, but only for the Windows clients. But I'd rather keep them separated. Kerberos on linux. Is that a pain or a bigger pain? Whenever I've worked with Kerberos on Windows I've come out all sweaty

Re: [CentOS] NIS or not?

2014-01-28 Thread Matt Garman
On Tue, Jan 28, 2014 at 9:18 AM, m.r...@5-cent.us wrote: At this late date, I'd be really, *REALLY* leery of using NIS. You say that *most* of your traffic is local, suggesting that some of it is *not*. And, for that matter, how good are the firewalls keeping other traffic out? I'd say no

Re: [CentOS] NIS or not?

2014-01-28 Thread m . roth
Matt Garman wrote: On Tue, Jan 28, 2014 at 9:18 AM, m.r...@5-cent.us wrote: snip We have an in-house written set of scripts that administer relevant configuration files, including /etc/passwd. It copies the correct version of that file (among many others) to each host, and shell of

Re: [CentOS] NIS or not?

2014-01-28 Thread Les Mikesell
On Tue, Jan 28, 2014 at 11:38 AM, Matt Garman matthew.gar...@gmail.com wrote: Here you may not realize you're distinguishing between authentication and authorization. Yeah, I forgot to mention that we already have Kerberos in place for authentication. It's authorization that is currently

Re: [CentOS] NIS or not?

2014-01-28 Thread Sorin Srbu
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: den 28 januari 2014 17:09 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Hmm, yes. It would seem most everybody recomends Kerberos. Will have

Re: [CentOS] NIS or not?

2014-01-28 Thread Jeffrey Hass
...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of m.r...@5-cent.us Sent: den 28 januari 2014 17:09 To: CentOS mailing list Subject: Re: [CentOS] NIS or not? Hmm, yes. It would seem most everybody recomends Kerberos. Will have to look into it then. Remember, kerboros came from

Re: [CentOS] NIS expiration of passwords

2012-07-06 Thread Ross Walker
On Jun 28, 2012, at 4:49 PM, Michael Coffman michael.coff...@avagotech.com wrote: I would believe this information is shared from the server to the other computers but here users still can connect (via SSH). If I try to get the information on the user connected I have: # chage -l USER user

[CentOS] NIS expiration of passwords

2012-06-28 Thread Fabien Archambault
Dear all, I have a NIS server which shares a database of users between some computers (nodes exactly) and I would like that, on the first login, the user changes its password. So, on the NIS server I have made: chage -d 0 USER Then: # cd /var/yp # make On the NIS server I have: chage -l USER

Re: [CentOS] NIS expiration of passwords

2012-06-28 Thread Michael Coffman
On Thu, Jun 28, 2012 at 7:23 AM, Fabien Archambault fabien.archamba...@univ-amu.fr wrote: Dear all, I have a NIS server which shares a database of users between some computers (nodes exactly) and I would like that, on the first login, the user changes its password. So, on the NIS server I

[CentOS] NIS passwd and paswd.byname map encryption

2011-12-28 Thread Boris Epstein
Hello listmates. It appears that in order to authenticate a Mac OS X Lion client via NIS the passwords in passwd and passwd.byname maps need to be MD5 encrypted. How do I see what encryption has been used in my maps? How do I change it? Thanks. Boris.

Re: [CentOS] NIS passwd and paswd.byname map encryption

2011-12-28 Thread James Pearson
Boris Epstein wrote: Hello listmates. It appears that in order to authenticate a Mac OS X Lion client via NIS the passwords in passwd and passwd.byname maps need to be MD5 encrypted. How do I see what encryption has been used in my maps? How do I change it? I think it is the case that Lion

Re: [CentOS] NIS question

2010-05-05 Thread Lars Hecking
ann kok writes: Hi How can we use NIS to control a user in different servers? eg: serverA /home/userA/javaapplication serverB /export/home/userA/javaapplication serverC /vol/home/javaapplication If you use NIS auto.home for home directories in general, e.g. /home/user, you can

[CentOS] NIS question

2010-05-04 Thread ann kok
Hi How can we use NIS to control a user in different servers? eg: serverA /home/userA/javaapplication serverB /export/home/userA/javaapplication serverC /vol/home/javaapplication Thank you ___ CentOS mailing list CentOS@centos.org

Re: [CentOS] NIS question

2010-05-04 Thread Larry Brower
ann kok wrote: Hi How can we use NIS to control a user in different servers? eg: serverA /home/userA/javaapplication serverB /export/home/userA/javaapplication serverC /vol/home/javaapplication Thank you Could you be more specific on what you are trying to do ?

Re: [CentOS] NIS question

2010-05-04 Thread Ray Van Dolson
On Tue, May 04, 2010 at 05:05:40PM -0700, ann kok wrote: Hi How can we use NIS to control a user in different servers? eg: serverA /home/userA/javaapplication serverB /export/home/userA/javaapplication serverC /vol/home/javaapplication Thank you Automounter maps? I guess

Re: [CentOS] NIS failover

2009-12-18 Thread Peter Serwe
of known working exploits against current yp-family versions on CentOS? NIS+ is not, the last time I checked, available for Linux; if my understanding is in error I would very much welcome correction. John

Re: [CentOS] NIS failover

2009-12-18 Thread Steve Thompson
On Fri, 18 Dec 2009, Peter Serwe wrote: After dealing with a couple of issues with OpenLDAP, I'd say it beats the piss out of NIS all day long. NIS is ancient and decrepit. Agreed. Hard to believe, but certain very well known organizations refuse to get off NIS for critical and secure

Re: [CentOS] NIS failover

2009-12-18 Thread Drew
Hard to believe, but certain very well known organizations refuse to get off NIS for critical and secure systems. {{citation needed}} :-) -- Drew Nothing in life is to be feared. It is only to be understood. --Marie Curie ___ CentOS mailing list

[CentOS] NIS failover

2009-12-17 Thread Jason Pyeron
We just updated our configuratiosn to have multiple NIS servers, when we initiated a test of client failover, we were disapointed. It seemed that the only way to get a filaover was to /etc/init.d/ypbind restart. It behaves as indicated in

Re: [CentOS] NIS failover

2009-12-17 Thread m . roth
We just updated our configuratiosn to have multiple NIS servers, when we initiated a test of client failover, we were disapointed. It seemed that the only way to get a filaover was to /etc/init.d/ypbind restart. It behaves as indicated in

Re: [CentOS] NIS failover

2009-12-17 Thread John R. Dennison
against current yp-family versions on CentOS? NIS+ is not, the last time I checked, available for Linux; if my understanding is in error I would very much welcome correction. John -- We cannot do everything at once

Re: [CentOS] NIS failover

2009-12-17 Thread Ray Van Dolson
of curiousity, can you point me to writeups of known working exploits against current yp-family versions on CentOS? NIS+ is not, the last time I checked, available for Linux; if my understanding is in error I would very much welcome correction. I believe Sun recently dropped NIS

Re: [CentOS] NIS failover

2009-12-17 Thread Stephen Harris
On Thu, Dec 17, 2009 at 12:44:54PM -0700, m.r...@5-cent.us wrote: Not one you want to hear: ditch NIS. It's known to have a *lot* of security holes. At the very least, NIS+. Better would be either RH NIS+ is a dead product. Even Sun gave up pushing it. (Funny; in 1995 the Solaris training

Re: [CentOS] NIS failover

2009-12-17 Thread Stephen Harris
On Thu, Dec 17, 2009 at 01:50:16PM -0600, John R. Dennison wrote: Out of curiousity, can you point me to writeups of known working exploits against current yp-family versions on CentOS? The problem isn't an exploit of the specific tools; the whole mechanism is insecure, unless you

Re: [CentOS] NIS failover

2009-12-17 Thread Jason Pyeron
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jason Pyeron Sent: Thursday, December 17, 2009 14:37 To: 'CentOS mailing list' Subject: [CentOS] NIS failover We just updated our configuratiosn to have multiple NIS servers

Re: [CentOS] NIS failover

2009-12-17 Thread Clint Dilks
Jason Pyeron wrote: -Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Jason Pyeron Sent: Thursday, December 17, 2009 14:37 To: 'CentOS mailing list' Subject: [CentOS] NIS failover We just updated our configuratiosn to have

Re: [CentOS] NIS failover

2009-12-17 Thread James Pearson
Jason Pyeron wrote: We just updated our configuratiosn to have multiple NIS servers, when we initiated a test of client failover, we were disapointed. It seemed that the only way to get a filaover was to /etc/init.d/ypbind restart. We've been using NIS like this for years - failover works

Re: [CentOS] NIS failover

2009-12-17 Thread Stephen Harris
On Fri, Dec 18, 2009 at 09:51:24AM +1300, Clint Dilks wrote: How is your /etc/yp.conf defined. NIS failover works flawlessly here if we have /etc/yp.conf like ypserver nis2 ypserver nis You also need to ensure you can resolve nis and nis2 without using NIS, so you may also need to them into

Re: [CentOS] NIS failover

2009-12-17 Thread Agile Aspect
On Thu, Dec 17, 2009 at 11:37 AM, Jason Pyeron jpye...@pdinc.us wrote: We just updated our configuratiosn to have multiple NIS servers, when we initiated a test of client failover, we were disapointed. It seemed that the only way to get a filaover was to /etc/init.d/ypbind restart. It

[CentOS] NIS

2009-07-22 Thread Per Qvindesland
Hi list Does anyone know about a good howto setup nis and to make ad see it and use the usernames? Regards Per Qvindesland E-mail: p...@norhex.com [1] http://www.linkedin.com/in/perqvindesland [2] Links: -- [1] http://webmail.norhex.com/# [2] http://www.linkedin.com/in/perqvindesland

Re: [CentOS] NIS

2009-07-22 Thread James Pearson
Per Qvindesland wrote: Hi list Does anyone know about a good howto setup nis and to make ad see it and use the usernames? http://www.linux-nis.org/nis-howto/HOWTO/ I don't think you can get AD to 'use' NIS as a directory service, but AD can be set up as a NIS server using IDMU (Identity

Re: [CentOS] NIS

2009-07-22 Thread Toralf Lund
Per Qvindesland wrote: Hi list Does anyone know about a good howto setup nis and to make ad see it and use the usernames? I haven't actually set up NIS in the machine I'm using right now, but if I remember correctly, what you need to do to get a machine to use the usernames and passwords on

Re: [CentOS] NIS

2009-07-22 Thread Per Qvindesland
Ok I am done getting it up and running. Thanks a million for everybodys help Regards Per Qvindesland E-mail: p...@norhex.com [1] http://www.linkedin.com/in/perqvindesland [2] --- Original message follows --- SUBJECT: Re: [CentOS] NIS FROM:  James Pearson TO: CentOS mailing list DATE: 22-07-2009

[CentOS] nis and new users

2008-04-15 Thread Jason Pyeron
Every time a new user logs into a development box (which does not use nfs for the home dirs) the get could not chdir to their home dir. They call me with the error and I do a: cp -a /etc/skel/ ~USER chown USER.users -R ~USER/ and it is fixed. Is there an automated way?

RE: [CentOS] nis and new users

2008-04-15 Thread Ross S. W. Walker
Jason Pyeron wrote: Every time a new user logs into a development box (which does not use nfs for the home dirs) the get could not chdir to their home dir. They call me with the error and I do a: cp -a /etc/skel/ ~USER chown USER.users -R ~USER/ and it is fixed. Is there an

Re: [CentOS] nis and new users

2008-04-15 Thread William L. Maltby
On Tue, 2008-04-15 at 10:27 -0400, Jason Pyeron wrote: Every time a new user logs into a development box (which does not use nfs for the home dirs) the get could not chdir to their home dir. They call me with the error and I do a: cp -a /etc/skel/ ~USER chown USER.users -R ~USER/ and it

[CentOS] NIS libuser and auto-make of maps

2008-04-15 Thread Ross S. W. Walker
I have my NIS user/group files separate from the system user/group files using libuser to manage them and that works well, but I am trying to find a way to get libuser to invoke a 'make' of the NIS maps whenever it updates the master files. Is there a routine I can configure in libuser to do this,

RE: [CentOS] nis and new users

2008-04-15 Thread Jason Pyeron
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross S. W. Walker Sent: Tuesday, April 15, 2008 10:39 AM To: CentOS mailing list Subject: RE: [CentOS] nis and new users Jason Pyeron wrote: Every time a new user logs into a development box

RE: [CentOS] NIS libuser and auto-make of maps

2008-04-15 Thread Jason Pyeron
Sent: Tuesday, April 15, 2008 10:43 AM To: CentOS mailing list Subject: [CentOS] NIS libuser and auto-make of maps I have my NIS user/group files separate from the system user/group files using libuser to manage them and that works well, but I am trying to find a way to get libuser to invoke

RE: [CentOS] NIS libuser and auto-make of maps

2008-04-15 Thread Ross S. W. Walker
Jason Pyeron wrote: Ross S. W. Walker wrote: I have my NIS user/group files separate from the system user/group files using libuser to manage them and that works well, but I am trying to find a way to get libuser to invoke a 'make' of the NIS maps whenever it updates the master files.

RE: [CentOS] nis and new users

2008-04-15 Thread Ross S. W. Walker
Jason Pyeron wrote: Ross S. W. Walker wrote: Jason Pyeron wrote: Every time a new user logs into a development box (which does not use nfs for the home dirs) the get could not chdir to their home dir. They call me with the error and I do a: cp -a /etc/skel/ ~USER

RE: [CentOS] NIS libuser and auto-make of maps

2008-04-15 Thread Jason Pyeron
. Walker Sent: Tuesday, April 15, 2008 12:21 PM To: CentOS mailing list Subject: RE: [CentOS] NIS libuser and auto-make of maps Jason Pyeron wrote: Ross S. W. Walker wrote: I have my NIS user/group files separate from the system user/group files using libuser to manage them

RE: [CentOS] nis and new users

2008-04-15 Thread Jason Pyeron
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross S. W. Walker Sent: Tuesday, April 15, 2008 12:16 PM To: CentOS mailing list Subject: RE: [CentOS] nis and new users Jason Pyeron wrote: but still get: Last login: Tue Apr 15 11:24:57

RE: [CentOS] nis and new users

2008-04-15 Thread Jason Pyeron
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross S. W. Walker Sent: Tuesday, April 15, 2008 12:16 PM To: CentOS mailing list Subject: RE: [CentOS] nis and new users Well what you have will only cover console logins via the login process

RE: [CentOS] nis and new users

2008-04-15 Thread Ross S. W. Walker
Jason Pyeron wrote: Ross S. W. Walker wrote: Jason Pyeron wrote: but still get: Last login: Tue Apr 15 11:24:57 2008 from .myvzw.com Could not chdir to home directory /home/USER: No such file or directory -bash-3.00$ Any ideas? Well what you have

Re: [CentOS] NIS and NIS+

2008-01-22 Thread James Pearson
Jason Pyeron wrote: How can I tell if I am using NIS+? I would like the data to be encrypted on the lan. I don't think NIS+ is 'supported' on Linux - see: http://www.linux-nis.org/nisplus/ James Pearson ___ CentOS mailing list CentOS@centos.org

RE: [CentOS] NIS and NIS+

2008-01-22 Thread Jason Pyeron
] [mailto:[EMAIL PROTECTED] On Behalf Of James Pearson Sent: Tuesday, January 22, 2008 6:49 To: CentOS mailing list Subject: Re: [CentOS] NIS and NIS+ Jason Pyeron wrote: How can I tell if I am using NIS+? I would like the data to be encrypted on the lan. I don't think NIS

Re: [CentOS] NIS and NIS+

2008-01-22 Thread John R Pierce
Jason Pyeron wrote: So what is the proper way to ensure root and others password (hashes) are not sent over the lan? kerberos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

[CentOS] NIS and NIS+

2008-01-20 Thread Jason Pyeron
How can I tell if I am using NIS+? I would like the data to be encrypted on the lan. -Jason -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - -

Re: [CentOS] NIS/YP revelation (I think)

2007-10-24 Thread James Pearson
Scott Ehrlich wrote: I'm using http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch30_:_Configuring_NIS as a guide and the services all show appropriately on the production server and client, and on a working test setup that is identical to production. Do you have any firewall

Re: [CentOS] NIS/YP revelation (I think)

2007-10-24 Thread Scott Ehrlich
On Wed, 24 Oct 2007, James Pearson wrote: Scott Ehrlich wrote: I'm using http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch30_:_Configuring_NIS as a guide and the services all show appropriately on the production server and client, and on a working test setup that is

Re: [CentOS] NIS/YP revelation (I think)

2007-10-24 Thread James Pearson
Scott Ehrlich wrote: On Wed, 24 Oct 2007, James Pearson wrote: Do you have any firewall setup on the server and/or clients? Disabled all around. What does 'rpcinfo -p' give on the server and clients? Exactly what the referenced URL says should be running. It would still be handy to

Re: [CentOS] NIS/YP revelation (I think)

2007-10-24 Thread Scott Ehrlich
I did discover tcpdump produces an ICMP host hostname unreachable error during ypbind, but does NOT do so when ypbind is not running. I also was reminded the firewall on the server is running, but I had these exact problems when the firewall was disabled. Trying to track down the problem via

Re: [CentOS] NIS/YP revelation (I think)

2007-10-24 Thread James Pearson
Scott Ehrlich wrote: I did discover tcpdump produces an ICMP host hostname unreachable error during ypbind, but does NOT do so when ypbind is not running. I also was reminded the firewall on the server is running, but I had these exact problems when the firewall was disabled. Trying to

Re: [CentOS] NIS/YP revelation (I think)

2007-10-24 Thread James Pearson
Scott Ehrlich wrote: On Wed, 24 Oct 2007, James Pearson wrote: Scott Ehrlich wrote: I did discover tcpdump produces an ICMP host hostname unreachable error during ypbind, but does NOT do so when ypbind is not running. I also was reminded the firewall on the server is running, but I had

Re: [CentOS] NIS/YP revelation (I think)

2007-10-23 Thread James Pearson
On 23/10/2007, Scott Ehrlich [EMAIL PROTECTED] wrote: So I configured my Enterprise 5 server to have NFS configured on specific ports via the NFS Server menu option. Since having done that, I am unable to get my two CentOS 5 workstations to bind via YP. One worked just fine before the port

Re: [CentOS] NIS/YP revelation (I think)

2007-10-23 Thread Scott Ehrlich
I'm using http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch30_:_Configuring_NIS as a guide and the services all show appropriately on the production server and client, and on a working test setup that is identical to production. The test setup works flawlessly. Scott On

Re: [CentOS] NIS problems

2007-10-18 Thread John Allen
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Ehrlich Sent: Wednesday, October 17, 2007 3:58 PM To: CentOS mailing list Subject: Re: [CentOS] NIS problems On Thu, 18 Oct 2007, Clint Dilks wrote: Scott Ehrlich wrote: I've got a RHEL5 server acting as a NIS/NFS server, and connected

Re: [CentOS] NIS problems

2007-10-18 Thread Scott Ehrlich
is: ypserver 127.0.0.1 yp.conf on the client is: domain my-nis-domain server ip-of-server Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Ehrlich Sent: Wednesday, October 17, 2007 3:58 PM To: CentOS mailing list Subject: Re: [CentOS] NIS problems

Re: [CentOS] NIS problems

2007-10-18 Thread Scott Ehrlich
] [mailto:[EMAIL PROTECTED] Behalf Of Scott Ehrlich Sent: Wednesday, October 17, 2007 3:58 PM To: CentOS mailing list Subject: Re: [CentOS] NIS problems On Thu, 18 Oct 2007, Clint Dilks wrote: Scott Ehrlich wrote: I've got a RHEL5 server acting as a NIS/NFS server, and connected one C5 machine

Re: [CentOS] NIS problems

2007-10-18 Thread Scott Ehrlich
I'm at a complete loss as to what is going on. I changed kernels and disabled the video driver, removed the firewire card. NIS refuses to work on this workstation. Unless this gets figured out, I'm going to simply have to create local user accounts, then let NFS take over. It would be

[CentOS] NIS problems

2007-10-17 Thread Scott Ehrlich
I've got a RHEL5 server acting as a NIS/NFS server, and connected one C5 machine just fine. I'm trying to connect another, and for the life of me, cannot figure out why NIS won't bind. NFS works fine. ypbind just hangs. I disabled SELinux and the firewall. I just cannot get it to bind.

RE: [CentOS] NIS problems

2007-10-17 Thread Ross S. W. Walker
Scott Ehrlich wrote: I've got a RHEL5 server acting as a NIS/NFS server, and connected one C5 machine just fine. I'm trying to connect another, and for the life of me, cannot figure out why NIS won't bind. NFS works fine. ypbind just hangs. I disabled SELinux and the firewall.

  1   2   >