Re: Password File Sync Script

I am not using NIS because, it is insecure and password information is
passed over the network unencrypted.

So, I am thinking of copying the password files in an ssh tunnel(using scp).

Is NIS really insecure?
What is the best way to manage user accounts in a network if security
is a concern?


On 6/19/06, Scott Taylor <[email protected]> wrote:
>
> On Mon, June 19, 2006 13:44, Sashikanth Madduri wrote:
> > Hi,
> >      I am writing a script to update password files from the server to
> > all the clients in the network.
> >
> > I will be copying the following files periodically to all the clients:
> >
> > /etc/passwd
> > /etc/shadow
> > /etc/group
> >
> > scp is one option to do the remote copying. But, root ssh is disabled
> > in the clients and I cannot use scp. Is there any alternative
> > way(other than scp) to do this. Do I have to enable root ssh inorder
> > to do a remote copy of the above files. Please help.
> >
> > PS: I am not using NIS for password management.
>
> That's crazy, not to mention dangerous.  If you are at a point where you
> need a script to update your passwords, perhaps you should consider using
> NIS or something.
>
> That said, you could always enable root ssh and just disable it again.
>
> --
> Scott
>
>
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html