LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 10-10-2005, 09:39 AM   #1
jhp
LQ Newbie
 
Registered: Jul 2004
Location: Derby, UK
Distribution: Arch, Fedora, Trustix
Posts: 21

Rep: Reputation: 15
NIS and Security


hi all.

i've been twiddling around with linux for a year or so now to good effect (nameservers, spamfilters, webfilters etc.)

we're looking to make a lab at work to run alongside or windows network demonstrating whether or not we could run with it in certain departments to save some money and hopefully provide a more flexible network platform (what i've read about openafs looks extremely versatile).

my first objective was to create a remote user account and home share to simplify admin of users, which i did easily with nfs and nis. i've read some discouraging reports about the security of this though, and would appreciate anyones experiences of other means of authentication & how 'elegant' they are to set up and running!

i also realise that sometimes security problems aren't really problems at all, just in the wrong hands they could be- so is nis actually ok? (broadly speaking of course)

look forward to any opinions you might have

tia

john
 
Old 10-11-2005, 08:24 AM   #2
MensaWater
LQ Guru
 
Registered: May 2005
Location: Atlanta Georgia USA
Distribution: Redhat (RHEL), CentOS, Fedora, CoreOS, Debian, FreeBSD, HP-UX, Solaris, SCO
Posts: 7,831
Blog Entries: 15

Rep: Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668Reputation: 1668
Its been a while since I did NIS and I've never done it in Linux.

NIS itself was thought of as fairly insecure but NIS+ came out to address some of the security aspects of NIS. Hopefully Linux is doing NIS+ - maybe doing some googling for that in combination with Linux will give you some answers.

Doing that google myself led to:
http://tldp.org/HOWTO/NIS-HOWTO/which.html

Within that I find the following quote:

"3.3. NIS or NIS+ ?
The choice between NIS and NIS+ is easy - use NIS+ only if you have severe security needs. NIS+ is much more problematic to administer (it's pretty easy to handle on the client side, but the server side is horrible). Another problem is that the support for NIS+ under Linux contains a lot of bugs and that the development has stopped."

The above doc also talks about NYS which is a new one on me. Looks like it may be a worthwhile read for your purposes. The link to it came from www.linuxsecurity.com

Last edited by MensaWater; 10-11-2005 at 08:26 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
SUSE 9 and 10 NIS clients with RedHat 8.0 NIS server not working fishsponge Linux - Networking 0 11-29-2005 08:43 AM
How to setup a solaris NIS client while with a Linux NIS server? ntcm Linux - Security 2 03-31-2004 01:43 PM
How to setup a solaris NIS client while with a Linux NIS server? ntcm Linux - Networking 1 03-31-2004 08:51 AM
How to setup a Solaris NIS client while with a Linux NIS server? ntcm Solaris / OpenSolaris 1 03-31-2004 07:10 AM
How to setup a Solaris NIS client while with a Linux NIS server? ntcm Linux - General 1 03-31-2004 07:10 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:58 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration