Quick HOWTO : Ch30 : Configuring NIS/zh

来自Ubuntu中文
Hnmsky留言 | 贡献2009年6月20日 (六) 11:20的版本 →‎Introduction
跳到导航跳到搜索

{{#ifexist: :Quick HOWTO : Ch30 : Configuring NIS/zh/zh | | {{#ifexist: Quick HOWTO : Ch30 : Configuring NIS/zh/zh | | {{#ifeq: {{#titleparts:Quick HOWTO : Ch30 : Configuring NIS/zh|1|-1|}} | zh | | }} }} }} {{#ifeq: {{#titleparts:Quick HOWTO : Ch30 : Configuring NIS/zh|1|-1|}} | zh | | }}


Introduction

Network Information Services (NIS) enables you to create user accounts that can be shared across all systems on your network. The user account is created only on the NIS server. NIS clients download the necessary username and password data from the NIS server to verify each user login.

An advantage of NIS is that users need to change their passwords on the NIS server only, instead of every system on the network. This makes NIS popular in computer training labs, distributed software development projects or any other situation where groups of people have to share many different computers.

The disadvantages are that NIS doesn't encrypt the username and password information sent to the clients with each login and that all users have access to the encrypted passwords stored on the NIS server. A detailed analysis of NIS security is beyond the scope of this book, but I suggest that you restrict its use to highly secure networks or to networks where access to non-NIS networks is highly restricted.

The Lightweight Directory Access Protocol (LDAP) offers similar features to NIS but has the advantage of supporting encryption without additional software and can support clients across multiple networks without the need for slave servers. It is for this reason that LDAP has become increasingly popular for this type of application. LDAP is discussed in more detail in Chapter 31, "Centralized Logins Using LDAP and RADIUS".