topic Re: Login Control in Operating System - Linux

Login Control

ivychung2 — Wed, 22 Feb 2006 02:31:53 GMT

We have 5 servers in our system , there are different application in each server , now the user need to login into different servers for these application , so they have to remember 5 different user login/password , if I want the simplify the login , can advise what function / software can more better to control the user login and easy for management ? does LDAP is the best choice ? thx

Re: Login Control

Vitaly Karasik_1 — Wed, 22 Feb 2006 02:45:36 GMT

IMHO, for configuring LDAP in LINUX is still needs work hard.
Old NIS ("Yellow Pages") will do it work for 5 machines and you can set up NIS server in 0.5 hours.

For start:
http://www.tldp.org/HOWTO/NIS-HOWTO/setting_nis.html What do you need to set up NIS?

Rgds,
Vitaly
PS: and don't forget about *points*! :-|

Re: Login Control

ivychung2 — Wed, 22 Feb 2006 03:07:52 GMT

thx reply ,

Do you mean NIS is also a good choice for login control ? I have ever use it , is it easy management and have the same functionality with LDAP ? thx

Re: Login Control

Dineshkumar — Wed, 22 Feb 2006 04:21:56 GMT

Hi

For 5 servers NIS setup should be ok.
Among them one machine can act as NIS master server and you can migrate existing unix user to nis user

Regards,
Dinesh

Re: Login Control

Vipulinux — Wed, 22 Feb 2006 04:35:43 GMT

Hi

What OS are you using? On redhat LDAP would be the best choice but looking at your env as you just need central logins on 5 server's NIS should work for you and its easy to configure as well.

For LDAP check this out:
http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/ref-guide/ch-ldap.html

For NIS: use the linuxhomenetworking link provided in earlier post.

Cheers

Re: Login Control

Vitaly Karasik_1 — Wed, 22 Feb 2006 04:57:10 GMT

> is it easy management and have the same functionality with LDAP ?

NIS provides you with a single users/passwords database, so your users will be able to use the same username/password on all machines.
If you need more, please provide more details about your requerements.

Re: Login Control

ivychung2 — Wed, 22 Feb 2006 05:13:17 GMT

thx reply ,

Do you mean LDAP is for a lot servers and NIS is for relative smaller no of servers ?
thx

Re: Login Control

ivychung2 — Wed, 22 Feb 2006 05:25:01 GMT

thx reply,

I use RH Linux , now we only have 5 servers but maybe expand to 10 later , I want user have one single login/password , and only need to login to one of these server ( ldap server ) then can use all applications in different server , if so , is LDAP better than NIS ? thx

Re: Login Control

Vitaly Karasik_1 — Wed, 22 Feb 2006 05:34:37 GMT

LDAP is more scalable and secure than NIS.

If you already have MS Windows domain in your company, you already have LDAP (== Active directory) and by using AD for central user authentication you can intergrate Linux & MS Windows.

But LDAP configuration is still (IMHO) more complicated than NIS, you can build NIS very fast.

Re: Login Control

Vitaly Karasik_1 — Wed, 22 Feb 2006 06:07:22 GMT

>and only need to login to one of these >server ( ldap server ) then can use all >applications in different server , if so , >is LDAP better than NIS ?

Good idea, but it's not so easy to implement. The keyword for this is "single sign on". There are several solutions for this, but it's not trivial.

With NIS/LDAP authentication you just can use the same username/password for on all servers. In fact, after login to one of the servers you can user passwordless "ssh" for running applications on other servers.

Re: Login Control

Vipulinux — Wed, 22 Feb 2006 06:27:59 GMT

Hi

MY idea is to have NIS if the no. of server's is less than 30-40
If more go for LDAP.

Looking at your scenario i think u should go for NIS

Cheers

Re: Login Control

Ryan Frank — Thu, 23 Feb 2006 08:45:12 GMT

I think it really depends on your requirements... Are these machines going to be production? if so they will probably be audited, and NIS does not provide a security auditors are happy with... You may want to look at NIS+ or LDAP... If you have a Windows AD infrastructure you could use Vintela to authenticate to the domain... or you could configure LDAP...

As everything seems to be pointing to LDAP for the future or authentication (in some way shape or form) I would work on the LDAP solution... This way you have it under your belt when things need to expand...

-Ryan