Very Computer

by **mjt** » Sun, 31 Aug 2003 02:59:58

> I have many solaris servers with approx 30,000 user accounts.
> Currently, I'm generating a new passwd/shadow file every 5 minutes
> from a MySQL database. I feel this is somewhat less than efficient.

> I looked at PAM for authentication but unfortunately, that doesn't
> really solve my problem because from what I gather PAM doesn't pass
> any info back other than is the user/pass pair valid. This means I
> still need to maintain the passwd file for home dir, shell, etc...

> What do you think the best solution would be. All this info is
> readilly available from the MySQL database and Radius.

> Thanks for any insight you can provide.
> Paul

Ever look at LDAP? Works with Radius:

http://docs.sun.com/source/806-4252-10/mapping.htm

by **Martin Schoe** » Sun, 31 Aug 2003 04:55:22

> I have many solaris servers with approx 30,000 user accounts.
> Currently, I'm generating a new passwd/shadow file every 5 minutes
> from a MySQL database. I feel this is somewhat less than efficient.

You definitely want to use ldap.

Never seen any serious admin trying to handle more than, let's say, 200
users without using whatever kind of directory service.

Martin

Very Computer

Remote Authentication

Remote Authentication

Remote Authentication