in reply to Authenticating users against NIS+

I wish to change a few files in some users home directories, either their contence or existence on NIS+ computers. But I was going to let some users have access to a few of the pieces I create for this (adjusting .forwards and vacation messages), however, I need to verify that the person submiting the web form is who they say they are. Also because I'm stuck on a Solaris system I cannot write into a users home directory on my CGI server as the main NIS+ is not my CGI computer, so I need to get into their account and make the changes as root cannot write into remote directories in Sun NFS.
so, I need a shell that has been authenticated for the user account to have stuff done to it on a NIS+ system.
have I been explict enough in this write up?

Replies are listed 'Best First'.
Re: an adjusted version of my question
by nite_man (Deacon) on May 22, 2003 at 16:03 UTC
    In my mind, Kerberos - a system for authenticating users and services on a network is a good solution for you. There is a Perl extension for Kerberos 5 Authen::Krb5 in the CPAN.

    Update: It isn't easy solution but, I think, that it's good and power tool for development high-quality software product which needs mechanism of authorization (for example, intranet).

          
    --------------------------------
    SV* sv_bless(SV* sv, HV* stash);