Re: Informix 7.23 via NT and Unix security?
Posted in 1998
Mike Segel <mikey@segel.NOSPAM-.KING.OF.MYDOMAIN.-NOSPAM.com> offerred: +Narkinsky, Pat wrote: +> +> It sounds as thought what you need is "NIS" (Network Information +> System). This is a network service that allows multiple UNIX machines +> to share configuration files. Unfortunately, NIS can become a major +> security hole. NIS+, (which is only available on Solaris last time I +> looked) solves these problems. +> +> I believe NIS+ has some facility for password aging, but I am not sure. +> +Uhmmm, +Can you still do a ypcat in NIS+? No, you can't. And the name of the NIS+ directory object you want is so stupid that, even using it a couple of times I week, I always forgot what it was (normal_name.org_dir, which I had to just go look up). Seriously, you can set permissions on the nis+ directory objects to prevent the average user from running niscat to see the contents. Dave Dave Kosenko davek@summitdata.com Director of Training Services (732) 469-4070 Summit Data Group (an Informix Authorized Education Center)