Subject: Re: Centralized User and Password Management
To: None <netbsd-users@NetBSD.org>
From: Jorgen Lundman <lundman@lundman.net>
List: netbsd-users
Date: 11/26/2004 10:01:23
Luke Mewburn wrote:
> On Wed, Nov 24, 2004 at 05:53:37PM -0500, Louis Guillaume wrote:
>   | Luke Mewburn wrote:
>   | >I intend to port PADL's nss_ldap.so to NetBSD and/or write one from
>   | >scratch, sometime in the future.
>   | 
>   | Will this mean that "ldap" can be an option for a "source" in nsswitch.conf?
> 
> Yes.  I currently have a functional /lib/nss_winbind.so.0 which is
> enabled in nsswitch.conf with a ``winbind'' source keyword.  E.g:
> 	passwd: files nis winbind
> 	group:  files nis winbind

PAM with LDAP is something we already use for Solaris so this would be a nice 
addition. I assume that the intergrated SSL support in LDAP will "just work" and 
can be enforcable as per normal.

Lund

-- 
Jorgen Lundman       | <lundman@lundman.net>
Unix Administrator   | +81 (0)3 -5456-2687 ext 1017 (work)
Shibuya-ku, Tokyo    | +81 (0)90-5578-8500          (cell)
Japan                | +81 (0)3 -3375-1767          (home)