Linux.com

Re:And the comments are pouring in

Posted by: Anonymous Coward on December 16, 2006 06:33 AM
Then that's something that should be addressed. The Samba team, it turns out, has already done this with Samba 3. With SMB logon, you get NIS's "domain" benefits without NIS's problems.

Yes, it's complex to get going, but then, so is Microsoft's Craptive Directory. "Oh, but it's Windows, it's so easy to set up!" some MCSE will say. Well, the secretaries, office managers, and other non-technical people (including most MCSE's, BTW) who set up these things (e. g. in law offices) do them in so insecure a way that you might as well be using NIS anyway.

Samba/LDAP logon is about as secure as the Windows NT domain logon or Windows 2000 Craptive Directory logon. And, F/OSS operating systems can authenticate against it just fine, just like with NIS. So you have NIS's benefits, without the insecure-by-design nature of NIS, and without the proprietary lock-in of Microsoft.

#

Return to Best practices for NIS use