From owner-freebsd-questions Sat Mar 25 14:39:20 2000 Delivered-To: freebsd-questions@freebsd.org Received: from cat.math.uic.edu (cat.math.uic.edu [131.193.178.209]) by hub.freebsd.org (Postfix) with SMTP id E48F937B769 for ; Sat, 25 Mar 2000 14:39:16 -0800 (PST) (envelope-from vladimir-bsd-questions@math.uic.edu) Received: (qmail 34401 invoked by uid 31415); 25 Mar 2000 22:39:26 -0000 Date: 25 Mar 2000 22:39:26 -0000 Message-ID: <20000325223926.34400.qmail@cat.math.uic.edu> From: vladimir-bsd-questions@math.uic.edu To: freebsd-questions@freebsd.org Subject: authentication question Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Dear BSD users, we are running a network of BSD machines that provide various services to the users (imap, pop, mail, samba file sharing, access to web-based services, etc). Now that more and more users are getting "outside" accounts (DSL, cable), and less users are connecting through our phone lines, we ran into the following problem. Users connecting from outside would like to be able to use the same services that were restricted to machines on the local network. We are looking for some solution that would authenticate a roaming user, and add his IP address to the access control list (netgroup used by tcp-wrappers, or DNS for example), essentially allowing his machine to access imap, samba, etc. I could use a proxy server with a password authentication, but proxies give access only to specific services, and it would be nice to have some general solution. Sorry for not being more specific, since I don't even know what exactly I am looking for. Any opinions will be very appreciated. Thank you! Vladimir vladimir@math.uic.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message