zlacker

[parent] [thread] 3 comments
1. jjoona+(OP)[view] [source] 2022-06-21 04:56:48
> these must be aligned between the client and server

looooool

(Seriously, though, could someone tell me why this was supposed to make sense?)

replies(3): >>toast0+j1 >>neilv+0n >>acdha+Nl2
2. toast0+j1[view] [source] 2022-06-21 05:10:10
>>jjoona+(OP)
If you've got centralized account management, it can work. Sending a fixed length 16-bit numeric id rather than a variable width username is a lot easier.

I've worked somewhere with a lot of NFS, and they had centralized account management, so everything was fine other than actual security, at least until we hit the limit of 16-bit uids. That place had a different centralized account management for production, so uids weren't consistent between corp and prod, but NFS in prod was very limited. (And you wouldn't nfs between corp and prod either)

I worked somewhere else without real centralized management of accounts on prod, and it was a PITA to bring that back under control, when it started becoming important. Even without intentional use of uids, it's convenient that they all line up on all servers; and it's a pain to change a uid that already exists on the system.

3. neilv+0n[view] [source] 2022-06-21 08:04:58
>>jjoona+(OP)
At the time, Sun NFS clients would receive equivalents of `/etc/passwd` over the network, using the YP service (later renamed NIS).

Like much of Unix, it was worse-is-better, and pretty productive for a site. (Well, until there was a problem reaching the NFS server, or until there was a problem with an application license manager that everyone needed.)

4. acdha+Nl2[view] [source] 2022-06-21 21:04:57
>>jjoona+(OP)
> (Seriously, though, could someone tell me why this was supposed to make sense?)

Think about the environment it was originally used in — large organizations, computers which cost as much as a car, LANs which aren't easily accessible (e.g. the Unix people have access but laptops are expensive oddity and the sales people are probably sitting in front of a DOS box or shelled into that Unix server), etc. It's more defensible when your unix administrator is going to configure each of the servers to use the same NIS user directory.

All of that broke down when IP networking became the default, every desk in the building had a network port, and things like WiFi and laptops completely blew away the idea that the clients were managed by a single administrative group.

[go to top]