Синхронизация учетных записей пользователей через несколько серверов

Вы проверили, чтобы видеть, существует ли запись для него в файле Lmhosts? Раз так затем это будет использовать тот IP-адрес вместо того, чтобы искать IP с помощью WINS или NetBIOS.

7
задан 14 September 2012 в 02:11
4 ответа

There are two popular approaches

  • You either setup central authentication (ldap, nis).
  • You setup a configuration management system (puppet,chef,cfengine, shell script) to automatically create accounts, and configure the environment on all your managed systems.

Central authentication systems are good when all the systems are all under the control of the same organization. It tends to be necessary when you have lots of users, and when will need to use the authentication for many things behind just logging in.

The configuration management way is good if you generally just need to setup a small number of remote admin accounts, and service accounts.

10
ответ дан 2 December 2019 в 23:18

I would also add to Zoredache's answer that NIS is not the way to go for anything used by more than a few people or including any public access. There's quite a few quirks to NIS and it's very easy to introduce significant security risk to NIS.

I've seen implementations where the password hashes are included in the passwd user mappings.

It's also rather easy to inject a malicious server onto an NIS network that is broadcasting. Especially hazardous with the password hashes included in the passwd map. Install an Ubuntu box, ''apt-get install nis'', and you're in and can get a list of users on the network.

3
ответ дан 2 December 2019 в 23:18

Solving this problem is what NIS was invented for.

0
ответ дан 2 December 2019 в 23:18

Для небольших / более простых развертываний может помочь проект под названием Internet Account Replication (IAR). Он имеет простую архитектуру сервер-клиент и синхронизирует учетные данные с помощью SSH.

4
ответ дан 2 December 2019 в 23:18

Теги

Похожие вопросы