This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links

Version management

Difference between version and

At line 1 added 33 lines
!!! Overview [1]
With the introduction of NSS (Name Switching Service) most of the services within UNIX were given the capability of storing and retrieving data from more than one database location.
The [/etc/nsswitch.conf|Nsswitch.conf] is used to list the available databases along with a hierarchical order of locations to search. Below is an example:
{{{
passwd files ldap
}}}
In this structure, data for the passwd database can be located in either files or ldap.
[NIS], however, __cannot__ search for data in more than one location using nsswitch.conf. Therefore, in order to provide legacy [NIS] support, basic UNIX libraries support a compatibility or [{$pagename}] mode to allow NIS to search in more than one location:
{{{
passwd compat
passwd_compat files nis
}}}
In this structure, the [Passwd] database is in compatibility mode, and by using the (+/-) symbol in the passwd and shadow files, servces will search for data in files, then NIS. Based on the Solaris 9 Basic Library Reference, compat is provided for NIS only.
!! Discouraged "compat" mode
In implementing LDAP as a Naming Service, the "compat" mode which was designed for NIS is highly discouraged.
DO NOT USE [{$pagename}] unless NIS is in use.
Other methods of access restriction are equally available and currently deployed in customer environments. Customers should develop an architecture that includes needed restriction capabilities followed by thorough testing, development and implementation of the technology that best meets their requirements.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Compatibility in NIS|http://blogs.sun.com/mike_webb/entry/access_control_with_ldap_in] - retrieved 2010