Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
LDAP vs NIS?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
Nitro
Bodhisattva
Bodhisattva


Joined: 08 Apr 2002
Posts: 661
Location: San Francisco

PostPosted: Tue Apr 30, 2002 12:12 am    Post subject: LDAP vs NIS? Reply with quote

Has anyone setup either LDAP or NIS successfully? I just want something that will keep all my UIDs, GIDs, and passwords the same across several linux boxes. I want it to work securly, cleanly and transparently.

I tried reading up on them and as I understand it NIS was developed my SUN and ported to Linux, and is still in part closed source. LDAP on the other hand is competely open source and capable of handling more then just user authentication?

Am I correct or am I missing something? I can't seem to get LDAP working, from what I've read LDAP is a better solution, yes?
_________________
- Kyle Manna

Please, please SEARCH before posting.

There are three kinds of people in the world: those who can count, and those who can't.
Back to top
View user's profile Send private message
ves
n00b
n00b


Joined: 17 Apr 2002
Posts: 30

PostPosted: Tue Apr 30, 2002 12:48 am    Post subject: Reply with quote

i've never played with NIS, but LDAP is pretty cool. I've used it before to setup a qmail/ldap pop toaster.
Back to top
View user's profile Send private message
Target
Apprentice
Apprentice


Joined: 25 Apr 2002
Posts: 200

PostPosted: Tue Apr 30, 2002 12:50 am    Post subject: Reply with quote

I haven't set up LDAP since my network is small and I never add new users. I just copied passwd/shadow/group around. :p

I have heard that it can be used to store things like certificates, so you could use PKI to authenticate users instead of passwords if you wanted to.
Back to top
View user's profile Send private message
ozric100
Tux's lil' helper
Tux's lil' helper


Joined: 23 Apr 2002
Posts: 136

PostPosted: Tue Apr 30, 2002 5:09 am    Post subject: Reply with quote

If you are up to it. http://www.arlut.utexas.edu/gash2/
Back to top
View user's profile Send private message
bart
n00b
n00b


Joined: 13 Apr 2002
Posts: 60

PostPosted: Tue May 21, 2002 9:48 pm    Post subject: Reply with quote

Nitro, you told me you got LDAP up and running. I don't understand it completely. What am I doing wrong?

I installed 'openldap' and 'pam_ldap' on both the server and the client. I replaced the original 'pam.d' directory from '/etc' with the 'pam.d' directory in '/usr/doc/pam_ldap-134-r1' and unzipped all the files.

Than I edited some configfiles:
/etc/ldap.conf on server:
Code:
host 127.0.0.1  # localhost
base dc=localdomain  # networkname


/etc/ldap.conf on client:
Code:
host 192.168.1.4  # IP for server
base dc=localdomain  # networkname


/etc/openldap/ldap.conf on server:
Code:
BASE dc=localdomain


/etc/openldap/ldap.conf on client:
Code:
BASE dc=localdomain


Isn't it confusing to have both '/etc/ldap.conf' and '/etc/openldap.conf'? Or am I doning something wrong?

/etc/openldap/slapd.conf on server:
Code:
include /etc/openldap/schema/core.schema
pidfile /var/state/slapd.pid
argsfile /var/state/slapd.args

database ldbm
suffix "dc=localdomain"
rootdn "cn=Manager,dc=localdomain"
rootpw secret
directory /var/state/openldap-ldbm
index objectClass eq


That should be okay for now, isn't it?
So, I started slapd on the server:
Code:
/etc/init.d/slapd start


To see if it is running:
Code:
nmap 192.168.1.4
...
389/tcp  open  ldap
...

That looks okay.

What to do now? I don't need the 'slurpd' daemon. True?

ldapsearch on the server works fine:
Code:
ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts

tells me:
Code:
version: 2
dn:
namingContexts: dc=localdomain
search: 2
result: 0 Success


But on the client it fails:
Code:
ldap_bind: Can't contact LDAP server


I don't now what to do now :roll:

I think I have to start some kind of daemon on the clients too, but which?
Back to top
View user's profile Send private message
tebers
Tux's lil' helper
Tux's lil' helper


Joined: 24 Apr 2002
Posts: 115
Location: Germany, Kirchheim near Munich

PostPosted: Tue May 21, 2002 10:27 pm    Post subject: Reply with quote

well, if you want read good material bout ldap i can recommend and ibm-redbook

link

or

link

or just go to www.redbooks.ibm.com and search for ldap

they have really tons of good documentations there.
as I remember ibm and lotus have been really heavy involved with creating ldap


thorsten
Back to top
View user's profile Send private message
Guest






PostPosted: Wed May 22, 2002 12:27 pm    Post subject: Reply with quote

i've tried ldap and nis

i chose ldap because it was much simpler to integrate with samba
with nis, it was a pain to synchronise passwords between samba and unix

if you are looking to go with a pure unix solution then
ldap for keeping uids and gids the same
and kerberos for authentication

and try and find as many kerbelized services as you can
this way, you log in once, and you don't have to keep on re-authenticating
Back to top
ramirezevanswa
n00b
n00b


Joined: 16 Jun 2010
Posts: 3

PostPosted: Wed Jun 16, 2010 6:28 am    Post subject: Reply with quote

NIS is dying out everywhere. But LDAP may be overkill for a small home LAN.LDAP is very conciliatory but very complicated as well. Where I work we use it for authentication to our web site but the other systems are a mix of NIS and mostly NIS+.I can setup a NIS domain for 50000 users in under 30 minutes for a global organization including old hardware. Windows can work nicely with LDAP
_________________
Mistakes are the portals of discovery.
Back to top
View user's profile Send private message
Nitro
Bodhisattva
Bodhisattva


Joined: 08 Apr 2002
Posts: 661
Location: San Francisco

PostPosted: Wed Jun 16, 2010 8:34 am    Post subject: Reply with quote

Holy thread resurrection, batman!

This thread is over 8 years old. :)
_________________
- Kyle Manna

Please, please SEARCH before posting.

There are three kinds of people in the world: those who can count, and those who can't.
Back to top
View user's profile Send private message
cach0rr0
Bodhisattva
Bodhisattva


Joined: 13 Nov 2008
Posts: 4123
Location: Houston, Republic of Texas

PostPosted: Wed Jun 16, 2010 10:16 pm    Post subject: Reply with quote

:lol:

thread 1334
we're up to ~850,000 now.

I don't think i could find a thread this old if I'd actively sought it out.
_________________
Lost configuring your system?
dump lspci -n here | see Pappy's guide | Link Stash
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum