[nzlug] General server/client enquiry
Roland Hill
rolandh at ak.planet.gen.nz
Tue Feb 12 19:44:47 NZDT 2008
On Tue, 12 Feb 2008 or thereabouts, Daniel Pittman came forth with:
> > I just wondered what people do when they deploy a number of Linux
> > clients with respect to user accounts and /home storage (assuming no
> > virtual users etc).
> Oh, this answer is going to please you:
Hehe, should have guessed.....:-)
<--------snip----------->
> The range of options we consider for deployment, or I have used
> previously, include:
> NSS data in:
> * passwd (per machine)
> * passwd managed by cfengine or puppet
> * NIS
> * LDAP
> * LDAP via Active Directory
> Password data / auth via:
> * passwd (per machine)
> * passwd managed by cfengine or puppet
> * NIS
> * LDAP
> * Radius
> * Kerberos (direct, or via AD)
> * third party commercial solution (RSA tokens, etc)
> * File storage (typically in some combination of...):
> * per-machine
> * central NFSv3 storage
> * central NFSv4 storage
> * NFS / CIFS via NetApp or equivalent NAS
> * AFS
> * Windows server via CIFS
> In other words: the area is complex, the cost/benefit of each choice can
> be hard to understand or quantify, and almost every site is different.
> If you are looking to learn things that are generally useful I advise
> roughly this order of things:
> * learn LDAP for NSS and auth
> * learn Kerberos for auth (with LDAP NSS)
> * learn about puppet and cfengine
> * learn NFSv3
> * learn AFS
Thanks Daniel for your very informative response (as per usual). Lots of
things to research now, which is great.
Every day is a good day for learning.....
--
Regards,
Roland
PGP Key 0xDA39319B = BCF0 1214 BAE9 5A3D 46FC 21A6 360D 9398 DA39 319B
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://www.linux.net.nz/pipermail/nzlug/attachments/20080212/f34c164f/attachment.pgp
More information about the NZLUG
mailing list