[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: NIS secure mode



> the network problems of NIS remains. 
> 
> - map are still transfered in plain text
> - easy spoofable 
> 
> > Does the use of secure mode under NIS make it really secure for an OpenBSD
> > only network ?

If you do indeed have an OpenBSD-only network, IPSEC can help with both
the problems sited above.  Though the last I checked, 'isakmpd' couldn't
do ESP and AH together.  So depending on how you configure IPSEC, you
may get encrypted transfers or authenticated connections, but not both.

David S.



Visit your host, monkey.org