Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Oct 2005 10:37:53 -0400 (EDT)
From:      Francisco <francisco@natserv.net>
To:        Tillman Hodgson <tillman@seekingfire.com>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: Distributed authentication. Which one?
Message-ID:  <20051018103540.K28109@zoraida.natserv.net>
In-Reply-To: <20051017203353.GF33270@seekingfire.com>
References:  <20051012234337.K63956@zoraida.natserv.net> <57416b300510142221r2c3da329o65d54cb0aa04fc73@mail.gmail.com> <20051015133148.P97899@zoraida.natserv.net> <18f601940510151547ka3573f8v2f0633010ad2874f@mail.gmail.com> <20051016010251.R90770@zoraida.natserv.net> <20051017203353.GF33270@seekingfire.com>

index | next in thread | previous in thread | raw e-mail

On Mon, 17 Oct 2005, Tillman Hodgson wrote:

> It has some interoperability and security issues. They're solvable, IMO.

Thanks for the feedback.

I guess a good test is to ask.. what would you use? :-)


> For example, most of the security concerns can be addressed with a
> combination of transport-mode IPsec and Kerberos and I avoid inter-
> operability issues by avoiding weird implementations of NIS ;-)

Sounds like more trouble than it's worth.
Right now I am leaning towards Kerberos or LDAP.
Need to learn more about them to see their strengths and weaknesses and 
how it would fit into our existing extructure.


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051018103540.K28109>