[98680] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: NIS Logins using PAM

daemon@ATHENA.MIT.EDU (Joerg Mertin)
Tue Nov 10 03:31:44 1998

Date: Tue, 10 Nov 1998 08:38:47 +0100
From: Joerg Mertin <smurphy@dspecialists.de>
To: redhat-list@redhat.com
Mail-Followup-To: redhat-list@redhat.com
In-Reply-To: <36472F76.9431F2B2@binarycompass.com>; from Karl Asseily on Mon, Nov 09, 1998 at 10:07:50AM -0800
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

On Mon, Nov 09, 1998 at 10:07:50AM -0800, Karl Asseily wrote: 
> Hello,
> 
> I have just set-up NIS as described in the HOWTO, but it says that I
> have to modify all pam_pwdb entries in /etc/pam.d/ to pam_unix_auth. Not
> only did it scare me to do that (maybe security is lessened?) but also
> when I tried to do it I got unable to resolve symbols.

It works with the plain pam-configuration files, only if your network
growth and you´ll got a lot of Users and groups, the group file size will
slowdown the login-procedure while it´s growing, since the pwdb-library is
very slow in parsing the group file, and parses it several times at login.
A pool with aprox. 10000 Users + 10000 group Entries, makes the login very
slow. At high server load, about 10 Minutes/User.

> Is there any way to make PAM work with NIS? I don't want to have to
> duplicate the password database manually every time :-(

But, if you use NIS anyway, You´ll have to modify all the files for tuning
purposes anyway...

Regards
-- 
In computing, the mean time to failure keeps getting shorter.
-------------------------------------------------------------------------
 Systemverwalter:       Joerg Mertin <smurphy@stardust.phantasia.org>
 Phone : +49 30 467 805-71           DSPecialists GmbH
 FAX:    +49 30 467 805-99           Wattstraße 11-13
 Email:  <smurphy@DSPecialists.de>   13355 Berlin
 WWW:    http://www.DSPecialists.de  Germany


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
		http://www.redhat.com http://archive.redhat.com
         To unsubscribe: mail redhat-list-request@redhat.com with 
                       "unsubscribe" as the Subject.


home help back first fref pref prev next nref lref last post