[nzlug] General server/client enquiry

Roland Hill rolandh at ak.planet.gen.nz
Tue Feb 12 19:44:47 NZDT 2008


On Tue, 12 Feb 2008 or thereabouts, Daniel Pittman came forth with:

> > I just wondered what people do when they deploy a number of Linux
> > clients with respect to user accounts and /home storage (assuming no
> > virtual users etc).

> Oh, this answer is going to please you:

Hehe, should have guessed.....:-)

<--------snip----------->

> The range of options we consider for deployment, or I have used
> previously, include:

> NSS data in: 
>  * passwd (per machine)
>  * passwd managed by cfengine or puppet
>  * NIS
>  * LDAP
>  * LDAP via Active Directory

> Password data / auth via:
>  * passwd (per machine)
>  * passwd managed by cfengine or puppet 
>  * NIS
>  * LDAP
>  * Radius
>  * Kerberos (direct, or via AD)
>  * third party commercial solution (RSA tokens, etc)

> * File storage (typically in some combination of...):
>  * per-machine
>  * central NFSv3 storage
>  * central NFSv4 storage
>  * NFS / CIFS via NetApp or equivalent NAS
>  * AFS
>  * Windows server via CIFS

> In other words: the area is complex, the cost/benefit of each choice can
> be hard to understand or quantify, and almost every site is different.

> If you are looking to learn things that are generally useful I advise
> roughly this order of things:

>  * learn LDAP for NSS and auth
>  * learn Kerberos for auth (with LDAP NSS)
>  * learn about puppet and cfengine
>  * learn NFSv3
>  * learn AFS

Thanks Daniel for your very informative response (as per usual). Lots of
things to research now, which is great.

Every day is a good day for learning.....

-- 
Regards,

Roland

PGP Key 0xDA39319B = BCF0 1214 BAE9 5A3D 46FC 21A6 360D 9398 DA39 319B
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://www.linux.net.nz/pipermail/nzlug/attachments/20080212/f34c164f/attachment.pgp


More information about the NZLUG mailing list