topic Re: Passwd in Operating System - HP-UX

Passwd

Clodoaldo João Rodrigue — Wed, 26 Feb 2003 13:47:10 GMT

Hello All,
we??ve in ou site some servers and so, wqe buy a SuperDome.We will go to center our processing in this machine. I have that to create the users who already were created in the other servers, in this centered server. Exists some form to catch passwd and to join all in one alone archive passwd?
Thanks for all !!!

Re: Passwd

Robert-Jan Goossens — Wed, 26 Feb 2003 13:59:54 GMT

Hi,

NIS network Information Service.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B1031-90044/B1031-90044_top.html&con=/hpux/onlinedocs/B1031-90044/00/00/15-con.html&toc=/hpux/onlinedocs/B1031-90044/00/00/15-toc.html&searchterms=NIS%7csetup&queryid=20030226-065839

Robert-Jan.

Re: Passwd

Colin Topliss — Wed, 26 Feb 2003 16:41:49 GMT

Are you talking about server consolidation here? You're looking at moving your users to the SD from all of the other servers?

If you are, that's a pain of a job (but really depends on the number of users you have - the more there are the more trouble it is).

If you're just looking for a central user management tool, look at NIS (yuk - no security), NIS+ (better, but difficult), or LDAP (a pain to set up/administer when you aren't used to the commands).

Re: Passwd

okcunix — Wed, 26 Feb 2003 16:46:11 GMT

Hello,

If systems are all "trusted mode", goto ITRC and review document: USECKBRC00007680 "How to copy configuration to another system" I've used it, and it's fairly straightforward.
HTH,

Re: Passwd

Steven E. Protter — Wed, 26 Feb 2003 18:48:21 GMT

I have a different suggestion.

There is a lot of resistance to NIS. It doesn't work on the public Internet, it can be a pain to administer. Apologiess to NIS officiando's but a better long term solution might be LDAP.

With LDAP you can have your Microsoft domain controllers or designated Linux or Unix machines handle user authentication at a central point.

Then when user stevenprotter@yourdomain.net is authenticated on the network, that user id is authenticated for all machines on the network. When he changes his password, its applied everywhere.

It can even be integrated so that samba mounts work off the LDAP server.

Overall the process is far from trivial, but it does seem to be where the business is going.

SEP