From owner-freebsd-stable  Thu Oct  9 18:16:51 1997
Return-Path: <owner-freebsd-stable>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id SAA12768
          for stable-outgoing; Thu, 9 Oct 1997 18:16:51 -0700 (PDT)
          (envelope-from owner-freebsd-stable)
Received: from tok.qiv.com (QshS8WU1vBny6TxPIVDJ4009jpSXMUZs@[204.214.141.211])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id SAA12755
          for <stable@FreeBSD.ORG>; Thu, 9 Oct 1997 18:16:37 -0700 (PDT)
          (envelope-from jdn@qiv.com)
Received: (from uucp@localhost)
	by tok.qiv.com (8.8.6/8.8.5) with UUCP id UAA01004;
	Thu, 9 Oct 1997 20:15:18 -0500 (CDT)
Received: from localhost (jdn@localhost)
	by acp.qiv.com (8.8.6/8.8.5) with SMTP id UAA00635;
	Thu, 9 Oct 1997 20:01:19 -0500 (CDT)
X-Authentication-Warning: acp.qiv.com: jdn owned process doing -bs
Date: Thu, 9 Oct 1997 20:01:19 -0500 (CDT)
From: "Jay D. Nelson" <jdn@qiv.com>
To: Dylan Northrup <northrup@ucet.ufl.edu>
cc: stable@FreeBSD.ORG
Subject: Re: password question
In-Reply-To: <Pine.A41.3.96.971009112814.95664B-100000@ronell.ucet.ufl.edu>
Message-ID: <Pine.BSF.3.96.971009195232.549D-100000@acp.qiv.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-stable@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Thu, 9 Oct 1997, Dylan Northrup wrote:

    > We're intending on putting a FreeBSD box into production along some AIX
    > boxes.  Is there some sort of way that we can get compatability between
    > the password generated by FreeBSD and the passwords on the AIX boxen?

_If_ you've installed DES, FreeBSD can use AIX passwords and vica
versa. Ala cut an encrypted password from /etc/security/passwd from
the AIX box, paste in into a vipw session on FreeBSD, and go. That's
how I converted our mail users from an aging AIX box ;)

    > Currently we rdist the password files to the various machines.  Previously
    > we used yp/NIS, however the password maps were compromised and the idea of
    > using NIS around here again has not been well received.

That dog won't hunt. The AIX and FreeBSD structure is different. Dust
off your Perl chops, spend some time with `man pw` on your FreeBSD
machine -- and for grins -- get ssh so you can automate it with
security. (Perl > 5.004 and ssh compile cleanly on AIX 3x & 4x.)

    > Are they any ideas that would help with this problem (and, no, we can't
    > just depricate the AIX boxes, no matter how much I'd love to)?

Give up on rdist -- it won't work. 

    > --
    > Dylan Northrup <*> 
    > northrup@ucet.ufl.edu <*> 
    > http://www.ucet.ufl.edu/~northrup <*>
    > 
    > ---------------
    > Random B5 Quote
    > "Sometimes you have to heal the family before you heal the patient."
    >   -- Dr. Franklin, "Believers"
    > 

-- Jay