Re: YP Alternative

2015-01-04 Thread David Gwynne
On 4 Jan 2015, at 5:32 pm, Brian Empson br...@teamhandbanana.com wrote: This sounds interesting. What would you replace krb5 with, if you don't mind me asking? I was contemplating krb5, but the setup and such is a pain for me (because I am not familiar with it). I'll probably wind up

Re: YP Alternative

2015-01-04 Thread Jiri B
On Sun, Jan 04, 2015 at 06:40:09PM +1000, David Gwynne wrote: i dunno. ideally i would just do basic auth over https against something that just returns 200 or 403. bsdauth on openbsd means i could probably implement that with a crappy script. linux probably has a crazy pam module i could use

Re: YP Alternative

2015-01-04 Thread David Gwynne
On 5 Jan 2015, at 06:14, Jiri B ji...@devio.us wrote: On Sun, Jan 04, 2015 at 06:40:09PM +1000, David Gwynne wrote: i dunno. ideally i would just do basic auth over https against something that just returns 200 or 403. bsdauth on openbsd means i could probably implement that with a crappy

Re: YP Alternative

2015-01-03 Thread David Gwynne
On 2 Jan 2015, at 9:52 pm, Brian Empson br...@teamhandbanana.com wrote: I'm looking into a way to sync up group and user information across a network of OpenBSD machines. I like YP, except that I don't need the password hashes transferred across the network. I like that it's built right

Re: YP Alternative

2015-01-03 Thread Brian Empson
This sounds interesting. What would you replace krb5 with, if you don't mind me asking? I was contemplating krb5, but the setup and such is a pain for me (because I am not familiar with it). I'll probably wind up rolling something custom with LDAP and YP mappings thrown in. On 1/4/2015 2:26

Re: YP Alternative

2015-01-02 Thread Christopher Barry
On Fri, 2 Jan 2015 13:44:36 +0100 Ingo Schwarze schwa...@usta.de wrote: Hi Brian, Brian Empson wrote on Fri, Jan 02, 2015 at 06:52:40AM -0500: I'm looking into a way to sync up group and user information across a network of OpenBSD machines. I like YP, except that I don't need the password

Re: YP Alternative

2015-01-02 Thread Predrag Punosevac
Carson Chittom wrote: There is ldapd(8) in base, though I've never used it myself. ldapd from the base is fine peace of software for small deployments. I have to OpenBSD LDAP servers with about 50-60 users each. Client machines besides of course OpenBSD machines consist of mixture Red Hat

Re: YP Alternative

2015-01-02 Thread Christopher Barry
On Fri, 2 Jan 2015 18:36:38 + skin...@britvault.co.uk (Craig Skinner) wrote: On 2015-01-02 Fri 13:06 PM |, Christopher Barry wrote: #!/bin/bash OpenBSD has much better ksh(1) A simple rdist(1) cronjob might do it. e.g: http://www.benedikt-stockebrand.de/rdist-intro_en.html Hi Craig,

Re: YP Alternative

2015-01-02 Thread Craig Skinner
On 2015-01-02 Fri 13:06 PM |, Christopher Barry wrote: #!/bin/bash OpenBSD has much better ksh(1) A simple rdist(1) cronjob might do it. e.g: http://www.benedikt-stockebrand.de/rdist-intro_en.html

Re: YP Alternative

2015-01-02 Thread Ingo Schwarze
Hi Brian, Brian Empson wrote on Fri, Jan 02, 2015 at 06:52:40AM -0500: I'm looking into a way to sync up group and user information across a network of OpenBSD machines. I like YP, except that I don't need the password hashes transferred across the network. I like that it's built right into

Re: YP Alternative

2015-01-02 Thread Carson Chittom
Brian Empson br...@teamhandbanana.com writes: I'm looking into a way to sync up group and user information across a network of OpenBSD machines. I like YP, except that I don't need the password hashes transferred across the network. I like that it's built right into the base install, are

YP Alternative

2015-01-02 Thread Brian Empson
I'm looking into a way to sync up group and user information across a network of OpenBSD machines. I like YP, except that I don't need the password hashes transferred across the network. I like that it's built right into the base install, are there better ways to handle synchronizing login

Re: YP Alternative

2015-01-02 Thread Brian Empson
Thanks for all the ideas. It's given me avenues for testing. On 1/2/2015 5:32 PM, Craig Skinner wrote: On 2015-01-02 Fri 14:02 PM |, Christopher Barry wrote: I can't speak to ksh being 'better', but it may well be. Aye, not subject to bash's many security problems, such as #ShellShock

Re: YP Alternative

2015-01-02 Thread Craig Skinner
On 2015-01-02 Fri 14:02 PM |, Christopher Barry wrote: I can't speak to ksh being 'better', but it may well be. Aye, not subject to bash's many security problems, such as #ShellShock #BashBug that brought loonix to it's knees a couple of months ago. Who wants to be patching boxes at work at