[Infrastructures] user management (mixing afs,ldap,kerberos)

Rudy Gevaert rgevaert@elis.ugent.be
Wed, 9 Mar 2005 13:22:49 +0100


Hello,

I'm doing my masters thesis about "Infrastructure management with Free
Software".

The paper on the website has been my starting point and I'm
investigating how to put it al together.

I have a question about user management.

NIS and NFS are tightly coupled.  And seem to be a good duo, if you
neglect the security problems with NIS and NFS.  Also NFS isn't a good
distributed file system.  It's better to replace NIS with LDAP.

A better option is AFS.  And I'm now trying to get that to work.  But
for AFS you need Kerberos.  And if I'm correct you still need
something like NIS or LDAP (let us use LDAP).  How can you now easily
manage Kerberos and LDAP?  For each LDAP user you need a Kerberos
principal, right?

Any suggestions to this, or other suggestions are more than welcome.

Rudy