Generation of Credentials

[GENE LORIOT]

Hope I understand you problem.  Here goes:  one of the MAJOR 
advantages of NIS+ is that any administrative principal can do anything
to the name space on any credentialed client or server.  So you can
generate to your hearts content anywhere.  The clear text problem can
be taken care of with SSH.  If you make a system an NIS+ client, then
stop and start (not restart) the sshd, you can login and keylogin to the
client with no trace of your activity.

There is also Solstice Adminsuite (2.3 is the last usable version, unless
someone knows how to ride roughshod on version 3.0).  But these products
are for Solaris, I don't know of any linux ports.

Hope this helps

Gene


linux-nisplus-request at lists.samba.org wrote:
> Send linux-nisplus mailing list submissions to
> 	linux-nisplus at lists.samba.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.samba.org/listinfo/linux-nisplus
> or, via email, send a message with subject or body 'help' to
> 	linux-nisplus-request at lists.samba.org
> 
> You can reach the person managing the list at
> 	linux-nisplus-owner at lists.samba.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of linux-nisplus digest..."
> 
> 
> Today's Topics:
> 
>    1. Credentials (Laurent Desimone)
> 
> 
> ----------------------------------------------------------------------
> 
> Date: Thu, 27 Mar 2003 18:36:44 +0100
> From: Laurent Desimone <laurent.desimone at epfl.ch>
> To: <linux-nisplus at lists.samba.org>
> Subject: Credentials
> Message-ID: <BAA8F53C.5B65%laurent.desimone at epfl.ch>
> Content-Type: text/plain; charset="US-ASCII"
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Message: 1
> 
> Hello,
> 
> For security reasons, I can't generate users's credentials on the root
> master server. In fact, I can't have clear passwords on the root master
> server, only on another machine. Then I have to send this credentials to
the
> root master server and add it to the cred.org_dir nisplus table.
> 
> Does someone know the algorithme to generate credentials ?
> 
> Regards,
> 
> Laurent
> EPFL-IC-IT
> 
> ------------------------------
> 
> _______________________________________________
> linux-nisplus mailing list
> linux-nisplus at lists.samba.org
> http://lists.samba.org/listinfo/linux-nisplus
> 
> 
> End of linux-nisplus Digest, Vol 3, Issue 3
> *******************************************



Gene Loriot, CSA/SCNA	
"...on a clear disk you can seek forever..."
Farm Side Systems