[SSSD-users] netgroups alternative?

Jakub Hrozek jhrozek at redhat.com
Thu Nov 8 09:55:56 UTC 2012


On Thu, Nov 08, 2012 at 10:41:28AM +0100, Ondrej Valousek wrote:
> Hi List,
> 
> Quick question (maybe not the right one for this list). Is there any alternative for netgroups in Linux?
> I mean netgroups are tightly bound to NIS which is insecure piece of
> crap so I wonder if there is any new alternative which should (can)
> be used in any new deployment.
> 
> Thanks!
> Ondrej

HBAC is the best solution, I think.

Other than that, access control can be also set per service and per host
in LDAP, see ldap_user_authorized_service or ldap_user_authorized_host.


More information about the sssd-users mailing list