From owner-freebsd-isp Mon Nov 18 06:43:36 1996 Return-Path: owner-isp Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id GAA17472 for isp-outgoing; Mon, 18 Nov 1996 06:43:36 -0800 (PST) Received: from house.multinet.net (house.multinet.net [204.138.173.37]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id GAA17467 for ; Mon, 18 Nov 1996 06:43:21 -0800 (PST) Received: from gabber.multinet.net (gabber.multinet.net [204.138.173.45]) by house.multinet.net (8.6.12/8.6.12) with SMTP id JAA09984 for ; Mon, 18 Nov 1996 09:43:13 -0500 Message-ID: <3290760F.2781E494@multinet.net> Date: Mon, 18 Nov 1996 09:43:27 -0500 From: graydon hoare X-Mailer: Mozilla 3.01 (X11; I; FreeBSD 2.2-ALPHA i386) MIME-Version: 1.0 To: freebsd-isp@freebsd.org Subject: Re: kerberos & RADIUS References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-isp@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Michael Dillon wrote: > > On Sat, 16 Nov 1996, Ricardo Kleemann wrote: > > > I just need to be able to share passwd databases between Linux and > > freebsd, and I'm looking for a solution. > > RADIUS will work. Since the RADIUS stuff for Linux is further along than > FreeBSD, run radiusd on your FreeBSD box and the radlogin stuff on Linux. I haven't used RADIUS yet but I'm getting along OK with kerb. Does RADIUS use pub-key stuff too? Anyone know the major package differences? Kerberos is nitpicky at times, I'll grant that, but it seems pretty secure, and it's already built in to helpful stuff like the r-commands and my netblazers. I mean, the downside is it's so confusing that if, on the off chance, you get an intruder who knows some sneaky way through it, there's no way in hell you'll understand what they're doing ;) but I'm a big fan of the kerberos security model.