Article View: comp.security.misc
Article #345Q: Setting up NIS in a secure manner.
From: Jim Hendrick
Date: Thu, 03 Sep 1992 14:38
Date: Thu, 03 Sep 1992 14:38
40 lines
2191 bytes
2191 bytes
Hi All, I have a question. Have any of you set up NIS in such a way that: - The NIS servers only allow a certain set of clients to bind to them. THis could be a set of network addresses in certain ranges or an explicit list of ethernet addresses, hostnames, or IP addresses. - The Clients only allow themselves to bind to this certain set of NIS servers. - The NIS password maps are not generally obtainiable. By this I mean that the client machines use the maps for login authentication, BUT J.Fred.User cannot obtain the encrypted passswords. This would need to be implemented on a very diverse set of machines. We currently run: Sun SPARCs (under 4.1.x and Solaris), DECstations (2100, 3100, 5000 all running 4.2 variations), SGI (Indigos and Irises running IRIX 4.0.x), IBM (rs6000 320s, 340s running AIX 3.2.x). Note that most of these platforms do NOT use a shadow password file. Is this a *very difficult thing to do* or not? What hardware/software do you use for the NIS servers? If any of you care to reply/comment/question me further, please do so at my email address and I will summarize if it seems warranted. Thanks!! Jim -- ########################################################################### ### Jim Hendrick (hendrick@ctron.com) ### ### ### Cabletron Systems Inc. ### " My opinions, etc are ### ### P. O. Box 5005 ### exclusively the property ### ### Rochester, NH 03867-5005 ### of nobody in particular." ### ### (603) 332-9400 x1457 ### ### ### fax:(603)332-1019 ### ### ###########################################################################
Technical Details
Message-ID:
<HENDRICK.92Sep3103801@marlins.ctron.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!convex!darwin.sura.net!zaphod.mps.ohio-state.edu!sample.eng.ohio-state.edu!purdue!mentor.cc.purdue.edu!noose.ecn.purdue.edu!samsung!balrog!ctron.com!hendrickShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!convex!darwin.sura.net!zaphod.mps.ohio-state.edu!sample.eng.ohio-state.edu!purdue!mentor.cc.purdue.edu!noose.ecn.purdue.edu!samsung!balrog!ctron.com!hendrick From: hendrick@ctron.com (Jim Hendrick) Newsgroups: comp.security.misc Subject: Q: Setting up NIS in a secure manner. Message-ID: <HENDRICK.92Sep3103801@marlins.ctron.com> Date: 3 Sep 92 14:38:01 GMT Sender: usenet@balrog.ctron.com Distribution: comp Organization: Cabletron Systems Inc. Lines: 40