[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: We need centralized accounts -- Any docs for ldap passwords?



Sergey V Kovalyov <sqk0316@SCIRES.ACF.NYU.EDU> writes:

> When you install libnss-ldap, there is a short howto in
> /usr/doc/libnss-ldap
> I also suggest downloading conversion tools from www.padl.com, which will
> help populate the LDAP database

OK.  I'm back working on this, and I've gotten openldap
etc. installed, and I've gotten the migration tools, read the HOWTO,
and played with gq to see that I can actually see my database, and I'm
about ready to try and cram my passwd/group stuff in there.  However,
from looking at the migration tools, it seems that they can translate
a lot more than just passwd/group stuff like services, protocols,
aliases, fstab, etc.

So I'm a little curious now.  I'd like to get a brief overview of the
overall picture.  Are people using ldap much for things like fstab?
If so, how would that actually work, and how would it interact with
other package upgrades?  (I can see how accounts work via glibc2 and
libpam-ldap/libnss-ldap.)  Also, I'm wondering what, if any, the
security concerns are relating to ldap access to passwd etc.

Can someone give me a brief overview or point me at an appropriate
doc?  I haven't found one yet.

Thanks

-- 
Rob Browning <rlb@cs.utexas.edu> PGP=E80E0D04F521A094 532B97F5D64E3930


Reply to: