🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #345

Q: Setting up NIS in a secure manner.

#345
From: Jim Hendrick
Date: Thu, 03 Sep 1992 14:38
40 lines
2191 bytes
Hi All,
	I have a question. Have any of you set up NIS in such a way
that:
	- The NIS servers only allow a certain set of clients to bind
	to them. THis could be a set of network addresses in certain
	ranges or an explicit list of ethernet addresses, hostnames,
	or IP addresses.

	- The Clients only allow themselves to bind to this certain set
	of NIS servers.

	- The NIS password maps are not generally obtainiable. By
	this I mean that the client machines use the maps for login
	authentication, BUT J.Fred.User cannot obtain the encrypted
	passswords.

	This would need to be implemented on a very diverse set of
machines. We currently run: Sun SPARCs (under 4.1.x and Solaris),
DECstations (2100, 3100, 5000 all running 4.2 variations), SGI
(Indigos and Irises running IRIX 4.0.x), IBM (rs6000 320s, 340s
running AIX 3.2.x). Note that most of these platforms do NOT use
a shadow password file. Is this a *very difficult thing to do*
or not? What hardware/software do you use for the NIS servers?

	If any of you care to reply/comment/question me further,
please do so at my email address and I will summarize if it seems
warranted.

Thanks!!

Jim
--
###########################################################################
### Jim Hendrick (hendrick@ctron.com)   ###                             ###
### Cabletron Systems Inc.		###   " My opinions, etc are    ###
### P. O. Box 5005			### exclusively the property	###
### Rochester, NH 03867-5005		### of nobody in particular."	###
### (603) 332-9400 x1457		###				###
### fax:(603)332-1019			###                             ###
###########################################################################
Technical Details
Message-ID: <HENDRICK.92Sep3103801@marlins.ctron.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!convex!darwin.sura.net!zaphod.mps.ohio-state.edu!sample.eng.ohio-state.edu!purdue!mentor.cc.purdue.edu!noose.ecn.purdue.edu!samsung!balrog!ctron.com!hendrick

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!convex!darwin.sura.net!zaphod.mps.ohio-state.edu!sample.eng.ohio-state.edu!purdue!mentor.cc.purdue.edu!noose.ecn.purdue.edu!samsung!balrog!ctron.com!hendrick
From: hendrick@ctron.com (Jim Hendrick)
Newsgroups: comp.security.misc
Subject: Q: Setting up NIS in a secure manner.
Message-ID: <HENDRICK.92Sep3103801@marlins.ctron.com>
Date: 3 Sep 92 14:38:01 GMT
Sender: usenet@balrog.ctron.com
Distribution: comp
Organization: Cabletron Systems Inc.
Lines: 40