In that, you're almost definitely wrong

Post #148,347 by ben_tilly 3/24/04 9:26:27 PM Reply	In that, you're almost definitely wrong Without googling, the following should be obvious to any admin. Shadowed passwords exist as a way to do local authentication with the password not stored in the publically readable passwd file. NIS exists as a way to centralize authentication across many systems. It moves password checking to a remote system. The answer that would have suggested that you actually understood what was going on would be to point out that the purpose of shadowed passwords and NIS contradict each other. You either check passwords locally or remotely. Changing how you do it locally when the data is remote is pointless. The worst possible answer would be to supply large amounts of gratuitous detail (of exactly the kind that you can Google for) without indicating any conceptual grasp of what is going on. And that is what you did. Regards, Ben "good ideas and bad code build communities, the other three combinations do not" - [link\|http://archives.real-time.com/pipermail/cocoon-devel/2000-October/003023.html\|Stefano Mazzocchi]
Post #148,351 by boxley 3/24/04 9:30:18 PM Reply	actually you can do both If I am local to the box I can have a shadowed passwd and a different NIS passwd and flag which to use. An example of such is recovery of a root passwd when an admin has been removed and the NIS maintainers cannot be reached in an emergency. thanx, bill In Bush\ufffds America, fighting terrorism abroad is used as a pretext for vanquishing civil liberties at home. David Podvin questions, help? [link\|mailto:pappas@catholic.org\|email pappas at catholic.org]
Post #148,356 by ben_tilly 3/24/04 9:36:54 PM Reply	I was wondering about that... My assumption was that Peter was right in [link\|http://z.iwethey.org/forums/render/content/show?contentid=148144\|http://z.iwethey.org...?contentid=148144] that the two couldn't be used at the same time. Bad assumption, but I didn't claim to be an admin. (Quite the contrary in fact.) Also it is still true that they can't be used at the same time on the same account. And that is true for exactly the reason that I gave. Cheers, Ben "good ideas and bad code build communities, the other three combinations do not" - [link\|http://archives.real-time.com/pipermail/cocoon-devel/2000-October/003023.html\|Stefano Mazzocchi]
Post #148,430 by pwhysall 3/25/04 1:57:09 AM Reply	I should have been more specific. Sorry for any confusion. The point stands, though. Peter [link\|http://www.debian.org\|Shill For Hire] [link\|http://www.kuro5hin.org\|There is no K5 Cabal] [link\|http://guildenstern.dyndns.org\|Blog]
Post #148,394 by admin 3/24/04 10:50:56 PM Reply	PAM does that too, IIRC You set the rules to look in NIS first, local second. Regards, -scott anderson "Welcome to Rivendell, Mr. Anderson..."
Post #148,414 by orion 3/24/04 11:55:04 PM Reply	That is the way I do things The worst possible answer would be to supply large amounts of gratuitous detail (of exactly the kind that you can Google for) without indicating any conceptual grasp of what is going on. I always supply large amounts of gratuitous detail without indicating any conceptual grasp of what is going on. Stream of unending conscience and all that, you know. ;) Obviously you have not paid attention to any of my posts for the past 6 years or however long I have been posting them as. If I googled it would have been word for word and explained it better than I explained it. But I have been branded as a Googler, and I hate Google with a passion and do not want to use it. I have stated that before, and I am only repeating myself yet again to someone who obviously did not pay attention to my previous posts. So you and Peter can have your reality on that. I don't care what you two think anymore. *"Lady I only speak two languages, English and Bad English!" - Corbin Dallas "The Fifth Element"*
Post #148,632 by folkert 3/25/04 8:22:18 PM Reply	There are ways to actually have both. But as you pointed out this is typically a stupid thing. Reasons being sometimes an alternate authentication system needs to be defined to guarantee access to remote systems even when the primary and perhaps secondary authentication systems are unavailable. But, given that now a days there are other ways to get access (RIB Boards, Remote KVMs etc...) this makes entirely ZERO sense. -- [link\|mailto:greg@gregfolkert.net\|greg], [link\|http://www.iwethey.org/ed_curry\|REMEMBER ED CURRY!] @ *i_wethey* 'In view of the fact that Microsoft is acondemned monopolist and on the other hand the internal messages andfinancial transactions of SCO look ever doubtful, Microsoft should bereally anxious that to the own company something does not remainsticking from the Gestank of the SCO.' --Plagarized from [link\|http://www.groklaw.net/article.php?story=20040322133607169\|GROKLAW]

Welcome to IWETHEY!