Dual Auth for Linux Clients
 

Hello,

We are planning to migrate NIS users to OpenLDAP and during migration is it possible if we can configure TWO Auth. Protocol like NIS and LDAP, if user does not found into NIS it should look into LDAP and authenticate?

Please suggest or if anyone has done the migration, plz share how we can migrate UNIX client & users & NFS share

Regards,
Swap

Easy
 

What you want to do is read the documentation and how-to pages for PAM, SAMBA and LDAP. You are going to use exactly the same PAM tricks to enable each kind of authentication on TOP of local authentication so that the first one that works will suffice for access.

Only one warning, it has been my experience that the more authentication sources you stack, the more time authentication can take. To get to local it will have to fail or time out of BOTH the others. This can be irritating.

OK, I lied, here is a second warning. Never log off your main work session. Start second sessions to test, but keep one active that you can use to roll things back in case your change makes it impossible to log in. Always leave yourself a way back.

Thanks for suggestion, it worked perfectly