Configuring NIS and Kerberos

[Andrew Kaplan]

Hi there --

Is there a procedure where I can use Kerberos to provide an extra level of security to an NIS domain? Thanks.

[Steven E. Protter]

Greetings Andrew,

What exactly is Kerberos going to provide.

NIS is not considered very secure and its incompatiable with many other products.

Want to REALLY be secure?

Here is a doc on replacing NIS with LDAP and Kerberos.

http://www.ofb.net/~jheiss/krbldap/howto.html

It might actually answer your original question as well.

Another potentially less helpful doc:
http://www.redhat.com/docs/manuals/linux/RHL-8.0-Manual/install-guide/s1-authconfig.html

Last but not least, this document may actually meet your original question criteria.

http://www-128.ibm.com/developerworks/linux/library/l-seclnx1.html

Honestly, I'm recommending the first path. NIS has issues, an uncertain future and LDAP is growing very fast.

SEP

[Andrew Kaplan]

Hi there --

My thinking was to have kerberos for the authentication of the domain user accounts, while keeping NIS for posix utilities.

One other question, we have a mixture of HP-UX 11.00 and Linux operating systems. Are there any compatibility issues that I should be aware of between the two flavors of *NIX?

Thanks.