[SSSD-users] netgroups alternative?
Jakub Hrozek
jhrozek at redhat.com
Thu Nov 8 09:55:56 UTC 2012
On Thu, Nov 08, 2012 at 10:41:28AM +0100, Ondrej Valousek wrote:
> Hi List,
>
> Quick question (maybe not the right one for this list). Is there any alternative for netgroups in Linux?
> I mean netgroups are tightly bound to NIS which is insecure piece of
> crap so I wonder if there is any new alternative which should (can)
> be used in any new deployment.
>
> Thanks!
> Ondrej
HBAC is the best solution, I think.
Other than that, access control can be also set per service and per host
in LDAP, see ldap_user_authorized_service or ldap_user_authorized_host.
More information about the sssd-users
mailing list