Trusted system

[sreejith_4]

Hi,

Is it possible to have trusted system with NIS ?

If yes, how to configure it ?

Thanks
Sreejith M

[Victor BERRIDGE]

Hi
the real question would be "does it make any sence"
Answer: definitely no

(It is incompatible with trusted anyway...)

What about considering LDAP?


All the best
Victor

[Steven E. Protter]

I recall reading that trusted systems do not work well or at all with NIS.

Since NIS is falling out of favor and use, I would suggest the following:

LDAP
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000067002382&aid=SEARCH_CKI&pil=1&serStr=LDAP+Configuration
LDAP and Windows 2003
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000075980604&aid=SEARCH_CKI&pil=3&serStr=LDAP+Configuration
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=http%3A%2F%2Fsearch.hp.com%2Fredirect.html%3Furl%3Dhttp%253A%2F%2Fforums1.itrc.hp.com%2Fservice%2Fforums%2Fquestionanswer.do%253FthreadId%253D675643%26qt%3D%252BLDAP%2B%252BConfiguration%2B%26hit%3D1&aid=SEARCH_FORUMS&pil=13&serStr=LDAP+Configuration&pir=1

Trusted system doc:
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=http%3A%2F%2Fsearch.hp.com%2Fredirect.html%3Furl%3Dhttp%253A%2F%2Fforums1.itrc.hp.com%2Fservice%2Fforums%2Fquestionanswer.do%253FthreadId%253D45809%26qt%3D%252Btrusted%2B%252Bsystem%2B%252Bconfiguration%26hit%3D1&aid=SEARCH_FORUMS&pil=1&serStr=trusted+system+configuration&pir=1
http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000065676950&aid=SEARCH_CKI&pil=7&serStr=trusted+system+configuration

http://www1.itrc.hp.com/service/james/dispDoc.do?docURL=%2Fservice%2Fcki%2FdocDisplay.do%3FdocLocale%3Den_US%26docId%3D200000062778846&aid=SEARCH_CKI&pil=2&serStr=trusted+system+configuration

SEP

[Patrick Wallek]

No, trusted systems and plain NIS absolutely do NOT work together.

NIS+ does work with trusted systems, but it can be a pain to set up. LDAP would be the better choice.

[Bill Hassell]

A Trusted system is used to significantly improve security. NIS on the other hand, sends passwords across the network for anyone to see. True, these passwords are the encrypted Unix passwords, but because they can be guessed once someone has the encrypted string, NIS is considered unsecure. It makes no sense to turn on the hidden password feature of a Trusted system and then trash it by sending it across the network.

NIS+ does encrypt the passing of the encrypted password but it is not backward compatible so *all* of your NIS clients must be changed to run NIS+ (not always possible). NIS+ is being deprecated throughout the industry in favor of LDAP, with a goal of single sign-on and a universal authentication system (LDAP even works with Windows).