Re: centralized user management

["Dom De Vitto" <dom_(_at_)_DeVitto_(_dot_)_com>]

For a small community, why not rsync+ssh the files...

You could then also rsync backup any locally configured files to a
"master" server, and check any dodgy-looking changes...

Dom
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Dom De Vitto                                       Tel. 07855 805 271
http://www.devitto.com                         mailto:dom_(_at_)_devitto_(_dot_)_com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-----Original Message-----
From: owner-misc_(_at_)_openbsd_(_dot_)_org [mailto:owner-misc_(_at_)_openbsd_(_dot_)_org] On Behalf
Of Matt Van Mater
Sent: Monday, April 14, 2003 4:02 PM
To: misc_(_at_)_openbsd_(_dot_)_org
Subject: centralized user management


I'm looking for a way to manage user accounts on my small home network,
and 
would like to create a centralized method of authentication.  I have
looked 
into it and have yet to find a solution that meets my needs well.  I am 
aware of openldap, but i think that implementing LDAP in my small
network 
would be a huge overkill for syncing a few users/groups and things like 
that.

One really easy way of doing it would be to set up an nfs mount and use
the 
passwd file on a central computer, but this would be an extremely bad
idea 
i'm sure.

I looked into kerberos, but I admit I only have a cursory knowledge of
how I 
can use it in an openbsd environment.  I have read several tutorials
linked 
off of deadly.org but they all address the need to kerberize daemons
like 
telnet and ftp, and don't address my need for a simple logon.

How would you guys suggest I set up a relatively secure, centralized 
authentication system for a network made up of mostly openbsd machines
(I do 
have some freebsd, mandrake and win2k boxen, but i don't care about them

using the same auth)

Matt





_________________________________________________________________
Add photos to your messages with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail