If your solaris uses PAM (Pluggable Authentication Module), you 
could always re-direct authentication off that Solaris box 
to your NT Domain via something like pam_smb.

With something like this, you can choose specific services 
(telnet, ftp, ssh) that you want to authenticate off the 
NT domain, rather than off the local password file. For those 
services you wish to do that for, there would be no need to 
synchronize with the nt domain because you'd already be 
authenticating against it.

In addition to separating service authentication requirements from 
the local password file, PAM also allows you to redirect authenticate 
to a stronger authentication service (there are pam modules for 
kerberos, radius, etc)

here's the url for solaris and pam:

http://www.sun.com/software/solaris/pam/

here's a url for pam_smb (which supposedly works on solaris):

http://www.csn.ul.ie/~airlied/pam_smb/

jeff



> also check blockade system.
> 
> -feng
> 
> > -----Original Message-----
> > From:       Martin [SMTP:[EMAIL PROTECTED]]
> > Sent:       Thursday, August 17, 2000 5:04 PM
> > To: [EMAIL PROTECTED]
> > Cc: [EMAIL PROTECTED]
> > Subject:    Re: Solaris and NT Password Synchronization
> > 
> > [EMAIL PROTECTED] wrote:
> > > 
> > > Hello
> > > 
> > > I am wanting to be able to change the password of an NT account and have
> > > that information get updated to my Solaris server or be able to do it
> > > the opposite direction ( Solaris updates Nt).
> > > 
> > > Is there a way to change NT accounts and passwords from the command
> > > line?
> > > 
> > The only way I know how to do this sort of thing is to use a 
> > ridiculously expensive enterprise management system like Tivoli.
> > 
> > You could also write something using perl, sockets, and the perl module 
> > whose name I forget which will handle user management on NT. Obviously, 
> > doing the user management is easier on Solaris.
> > 
> > 
> > -
> > [To unsubscribe, send mail to [EMAIL PROTECTED] with
> > "unsubscribe firewalls" in the body of the message.]
> 
> 
> ***********************************************************************
> Bear Stearns is not responsible for any recommendation, solicitation, 
> offer or agreement or any information about any transaction, customer 
> account or account activity contained in this communication.
> ***********************************************************************
> 
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
> 

-- 
#############################################################
# Jeff Burson                   Human Code, Inc.            #   
# Network Guru                  319 Congress Ave. Suite 100 #   
# [EMAIL PROTECTED]     Austin, TX 78701            #
# 512.477.5455 x1434            http://www.humancode.com    #
#############################################################

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to