I have the task to implement a LDAP service for the typical use cases: User authentication, storing more information on users, storing information on machines, etc.
Currently, we have a working NIS system in conjunction with NFS for Linux workstations. Windows machines do not participate and this is one reason, next to a bunch of other systems starting with email, for the change to LDAP.
The main issue, however, is that we are part of a much larger system which will stay with NIS for now. Some users not part of our department work with us and therefore need to log in into our system. Also, it is possible for our users to log in into other systems. These are case-to-case situations however: We explicitely invite somebody into our system or vice-versa.
As I'm just starting with this, could you please give me some hints on:
- What would be the preferred method of letting users from NIS log-in into our Linux machines with LDAP authentication? Is it possible/advisable to use LDAP and NIS side by side (like
files ldap nis
in nsswitch.conf) - What would be the preferred method of exporting our LDAP user data to the NIS system?
I am aware of the PADL software. However, we prefer to stay with open source software. Proprietary solutions are especially a no-go for the other side of the system.
Edit: Additional constraint! Sorry, I forgot to explicitely mention this. One important aspect is that user ids are in a given range so they do not conflict with the ones from other systems incorporated into the NIS. I don't know how user ids are generated with LDAP, perhaps you can give me an insight on this one as well. Thanks!