topic Re: Trusted system in Operating System - HP-UX

Trusted system

sreejith_4 — Wed, 11 May 2005 07:09:19 GMT

Hi,

Is it possible to have trusted system with NIS ?

If yes, how to configure it ?

Thanks
Sreejith M

Re: Trusted system

Victor BERRIDGE — Wed, 11 May 2005 07:16:21 GMT

Hi
the real question would be "does it make any sence"
Answer: definitely no

(It is incompatible with trusted anyway...)

What about considering LDAP?

All the best
Victor

Re: Trusted system

Steven E. Protter — Wed, 11 May 2005 07:21:31 GMT

I recall reading that trusted systems do not work well or at all with NIS.

Since NIS is falling out of favor and use, I would suggest the following:

LDAP
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000067002382&aid=SEARCH_CKI&pil=1&serStr=LDAP+Configuration
LDAP and Windows 2003
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000075980604&aid=SEARCH_CKI&pil=3&serStr=LDAP+Configuration
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=http%3A%2F%2Fsearch.hp.com%2Fredirect.html%3Furl%3Dhttp%253A%2F%2Fforums1.itrc.hp.com%2Fservice%2Fforums%2Fquestionanswer.do%253FthreadId%253D675643%26qt%3D%252BLDAP%2B%252BConfiguration%2B%26hit%3D1&aid=SEARCH_FORUMS&pil=13&serStr=LDAP+Configuration&pir=1

Trusted system doc:
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=http%3A%2F%2Fsearch.hp.com%2Fredirect.html%3Furl%3Dhttp%253A%2F%2Fforums1.itrc.hp.com%2Fservice%2Fforums%2Fquestionanswer.do%253FthreadId%253D45809%26qt%3D%252Btrusted%2B%252Bsystem%2B%252Bconfiguration%26hit%3D1&aid=SEARCH_FORUMS&pil=1&serStr=trusted+system+configuration&pir=1
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000065676950&aid=SEARCH_CKI&pil=7&serStr=trusted+system+configuration

http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000062778846&aid=SEARCH_CKI&pil=2&serStr=trusted+system+configuration

SEP

Re: Trusted system

Patrick Wallek — Wed, 11 May 2005 08:16:42 GMT

No, trusted systems and plain NIS absolutely do NOT work together.

NIS+ does work with trusted systems, but it can be a pain to set up. LDAP would be the better choice.

Re: Trusted system

Bill Hassell — Wed, 11 May 2005 08:51:21 GMT

A Trusted system is used to significantly improve security. NIS on the other hand, sends passwords across the network for anyone to see. True, these passwords are the encrypted Unix passwords, but because they can be guessed once someone has the encrypted string, NIS is considered unsecure. It makes no sense to turn on the hidden password feature of a Trusted system and then trash it by sending it across the network.

NIS+ does encrypt the passing of the encrypted password but it is not backward compatible so *all* of your NIS clients must be changed to run NIS+ (not always possible). NIS+ is being deprecated throughout the industry in favor of LDAP, with a goal of single sign-on and a universal authentication system (LDAP even works with Windows).