[NTLUG:Discuss] NIS capabilities? - noobie

[namit.bhalla at wipro.com]

On Fri, 2009-04-10 at 19:15 +0530, namit.bhalla at wipro.com wrote:
...
>> Thanks Chris for the detailed answer.
>> That actually leads me to the next question - in *ix world, what do
we
>> have 
>> that is analogous to AD in Windows? [perhaps I am going off-topic
here].
>> That is, how can an admin enforce policies across an enterprise?
>> I would imagine a server component that responds to LDAP requests and
an
>> 
>> LDAP client. Is that correct?

On Fri, 2009-04-10, cjcox at acm.org wrote:
...
> Yes... LDAP comes closest.  But the combination of LDAP plus
> kerberos is probably the closest actually.
> 
> And no... that DOES NOT get you some kind of policy enforcement.
> Again, just like NIS, you have a database (LDAP... which is more
> flexible than NIS tables) and an authentication piece (kerberos).
> 
> The rest is up to you.
> 
> I do recommend PAM as far as attempting to set some policies....
> but it's really not analogous to AD... Windows isn't *ix... and
> a lot of AD is there because Windows isn't *ix.
> 
> Short answer... it's different.  The idea of typical AD
> policy enforcement may not even apply.

Thanks Chris.
This clears a lot of things for me!

Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. 

www.wipro.com