Red Hat Enterprise Linux 5 Administration Unleashed

292CHAPTER 12Identity ManagementTABLE 12.3 ContinuedCommand-Line Option--disablewinbindusedefaultdomain--winbindjoin=--enablewins--disablewins--enablehesiod--disablehesiod--hesiodlhs=--hesiodrhs=--enablecache--disablecache--enablelocauthorize--disablelocauthorize--enablesysnetauth--disablesysnetauth--nostartDescriptionIf Winbind is enabled, users with no domain intheir usernames are not domain users.When joining the Winbind domain or ads realm,join as specified administrator.Enable WINS hostname resolution.Disable WINS hostname resolution.Enable Hesiod for user information.Disable Hesiod for user information.Set Hesiod LHS when enabling Hesiod.Set Hesiod RHS when enabling Hesiod.Enabling caching of user information with nscd.Disabling caching of user information withnscd.Enable local authorization for local users.Disable local authorization for local users.Enable network authentication for systemusers.Disable network authentication for systemusers. System users are authorized by localfiles only.Do not start or stop portmap, ypbind, or nscd.SummaryThe NIS, LDAP, Kerberos, Hesiod, SMB, and Winbind network authentication servicesdiscussed in this chapter can centralize user information, including passwords. This allowsfor easier maintenance and backup procedures. They also allow for identical authenticationfrom any system on the network.Review each of these authentication services and decide which one works best for yournetwork.