[nzlug] General server/client enquiry

Nevyn nevynh at gmail.com
Tue Feb 12 14:36:43 NZDT 2008


On Feb 12, 2008 1:58 PM, Daniel Pittman <daniel at rimspace.net> wrote:
> Roland Hill <rolandh at ak.planet.gen.nz> writes:
>
> > I recently got tired of having addresses spread across PC's and
> > different applications, so I installed openldap and use that as my
> > central address store.
> >
> > My network is purely at home; 1 x server and 1 x client, each running
> > Linux.
> >
> > I just wondered what people do when they deploy a number of Linux
> > clients with respect to user accounts and /home storage (assuming no
> > virtual users etc).
>
> Oh, this answer is going to please you:
>
> > i.e how do you deploy each client to have multiple user accounts
> > without setting them up individually each time? Do people use NIS for
> > this or even ldap?
>
> Yes.
>
> > I assume central storage of /home/$USER can be achieved with NFS.
>
> Yes, sometimes.
>
> > I'm in the mood for learning and playing on my home network. Any
> > pointers would be appreciated.
>
> The range of options we consider for deployment, or I have used
> previously, include:
>
> NSS data in:
>  * passwd (per machine)
>  * passwd managed by cfengine or puppet
>  * NIS
>  * LDAP
>  * LDAP via Active Directory
>
> Password data / auth via:
>  * passwd (per machine)
>  * passwd managed by cfengine or puppet
>  * NIS
>  * LDAP
>  * Radius
>  * Kerberos (direct, or via AD)
>  * third party commercial solution (RSA tokens, etc)
>
> * File storage (typically in some combination of...):
>  * per-machine
>  * central NFSv3 storage
>  * central NFSv4 storage
>  * NFS / CIFS via NetApp or equivalent NAS
>  * AFS
>  * Windows server via CIFS
>
>
> In other words: the area is complex, the cost/benefit of each choice can
> be hard to understand or quantify, and almost every site is different.
>
> If you are looking to learn things that are generally useful I advise
> roughly this order of things:
>
>  * learn LDAP for NSS and auth
>  * learn Kerberos for auth (with LDAP NSS)
>  * learn about puppet and cfengine
>  * learn NFSv3
>  * learn AFS
>
> Regards,
>         Daniel

I really really really hate sounding dense... but what is NSS Data??



More information about the NZLUG mailing list