Very Computer

by **InfoTe** » Fri, 21 Jun 2002 02:52:55

With Novell's NDS or MS Active Directory users log into the Tree (NDS)
or Domain (MS). Does a Unix user log into one server at a time or is
there a way Unix users can log into multiple servers simultaneously?

by **p..** » Fri, 21 Jun 2002 03:13:28

> With Novell's NDS or MS Active Directory users log into the Tree (NDS)
> or Domain (MS). Does a Unix user log into one server at a time or is
> there a way Unix users can log into multiple servers simultaneously?

Define 'log into'

--
Peter H?kanson
IPSec Sverige ( At Gothenburg Riverside )
Sorry about my e-mail address, but i'm trying to keep spam out,
remove "icke-reklam" if you feel for mailing me. Thanx.

by **Nicholas Bachman** » Fri, 21 Jun 2002 06:49:45

> With Novell's NDS or MS Active Directory users log into the Tree (NDS)
> or Domain (MS). Does a Unix user log into one server at a time or is
> there a way Unix users can log into multiple servers simultaneously?

If you're talking about a centralized authentication system, most Unix
flavors can use LDAP (which NDS and AD are) for password verification,
along with other solutions like NIS(+), Kerberos, Samba, etc. Note that
will all but NIS/NIS+, the users' passwd data (home directory, UID,
etc.) is not sent by the authentication system (although the Unix
snap-in(1) for AD may be able to, I'm not sure) so either something like
Hesoid or /etc/passwd must be used.

(1) Is that just a retarded name or what? Doesn't MS put things like
this through focus groups to weed out dumb, potentially misconstrued, names?

--
+ http://www.not-real.org/~nick +
+ How valuable is my contribution? Share your feedback at Affero: +
+ http://svcs.affero.net/rm.php?r=nick +

by **Liam Cunningha** » Fri, 21 Jun 2002 23:30:10

> With Novell's NDS or MS Active Directory users log into the Tree (NDS)
> or Domain (MS). Does a Unix user log into one server at a time or is
> there a way Unix users can log into multiple servers simultaneously?

The short answer is NO and yes. The long answer is that you have to
understand what Novell and MS are doing with the directory services and
how that might me applied to UNIX.
When you authenticate to NDS ( and presumably ActiveDir ) you are logging
in to an authentication server which verifies and stores your
credentials. When you then attempt to access a service on a particular
server, that server checks with the authentication server to verify who
you claim to be. This happens in the backgound and in such a way that
your PC does not have to cache your Login ID and password and you do not
get an annoying login prompt. Any application written with the appropriate
SDK can take advantage of this authentication. Novell provides a UNIX client
(Solaris I think) that will work with NDS ( now eDirectory ).
There are ways to duplicate this functionality on UNIX. The remote login
facility (rlogin) is one, although it is not designed to provide
assurances of security. You could also look into LDAP and kerberos which
I believe are the underlying technologies used be MS and Novell. In
addition, both LDAP and NIS can be used to centrally manage user accounts.
It really amounts to clearly defining what, specifically, you are trying to
accomplish. Logging into multiple UNIX systems simultaneously might not
make sense if you are talking about telnet sessions ( at least, not to me
), but might make sense and be quite trivial with other services.

Very Computer

unix directory and Novell NDS or MS Active Directory

unix directory and Novell NDS or MS Active Directory

unix directory and Novell NDS or MS Active Directory

unix directory and Novell NDS or MS Active Directory

unix directory and Novell NDS or MS Active Directory