I'm looking for a quick way to do s

[buraglio]

I'm looking for a quick way to do some multihost user management. I have 8 OpenBSD machines and a FreeBSD machine in various locations and I would like to be able to have all users, passwords, and groups replicated between them. I've used NIS+ in the past (and never want to use it again) and have some some looking at OpenLDAP (looks a but too bloated for what I need). I've tested scp-ing the /etc/group, /etc/passwd and /etc/master.passwd files using an croned script and ssh keys, but that seems too clunky. Does anyone have a more elegant but relatively thin wat to do this? I've seen it done through a postgresql database and a set of scripts that build the files from the db....I guess thats a possibility, i'd have to learn postgresql though. Any help appreciated. thanks. I've also cross posted this to the General Unix board..

NB ----------------------------------------
Nicholas D. Buraglio

http://www.buraglio.com/nick/gpg-pub-key.txt

 

[dbase77]

HI,

I think NIS should do the trick though. Usually people use that to manage same username, password for many machine. Seems like you alrady used that method. Whats the problem with NIS anyway?

regards,
feroz

 

[buraglio]

NIS would work OK, it lacks some of the security that NIS+ has, but I had terrible luck with NIS+, it could have been that I didn't do the original setup, but it used to breakfor no obvoius reason and the documentation I had was really poor. Right now I'm building from a postgresql database with perl scripts, it works pretty well, but it certainly very proprietary. ----------------------------------------
Nicholas D. Buraglio

http://www.buraglio.com/nick/gpg-pub-key.txt

 

[idreus]

Have you looked into LDAP?

 

[buraglio]

Yes, I've done LDAP for another project now, it's too bloated for what I need. Right now I'm building from a postgresql database with perl scripts, it works pretty well, but it certainly very proprietary. I may try the newest cfengine and see if it has some user management capabilities (older versions do not).

----------------------------------------
Nicholas D. Buraglio

http://www.buraglio.com/nick/gpg-pub-key.txt

 

[idreus]

LDAP bloated? Your solution is postgresql with perl scripts? You may want to read a little more into LDAP.