[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: apache FollowSymLinks and SymLinksIfOwnerMatch question



nate said:

> IMO ldap is more secure then NIS/NIS+ because it does not depend
> upon RPC services(which historically have many security problems).


one more thing to mention in regards to LDAP. With PAM/NSS LDAP
you can configure your directory server to require authentication
for queries, so a user would have to know a username to query in
order to get information. They would not be able to connect to
the database directly and retrieve a list of all users(e.g.
with NIS you can do ypcat passwd)

nate





Reply to: