Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Oct 2005 10:37:53 -0400 (EDT)
From:      Francisco <francisco@natserv.net>
To:        Tillman Hodgson <tillman@seekingfire.com>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: Distributed authentication. Which one?
Message-ID:  <20051018103540.K28109@zoraida.natserv.net>
In-Reply-To: <20051017203353.GF33270@seekingfire.com>
References:  <20051012234337.K63956@zoraida.natserv.net> <57416b300510142221r2c3da329o65d54cb0aa04fc73@mail.gmail.com> <20051015133148.P97899@zoraida.natserv.net> <18f601940510151547ka3573f8v2f0633010ad2874f@mail.gmail.com> <20051016010251.R90770@zoraida.natserv.net> <20051017203353.GF33270@seekingfire.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 17 Oct 2005, Tillman Hodgson wrote:

> It has some interoperability and security issues. They're solvable, IMO.

Thanks for the feedback.

I guess a good test is to ask.. what would you use? :-)


> For example, most of the security concerns can be addressed with a
> combination of transport-mode IPsec and Kerberos and I avoid inter-
> operability issues by avoiding weird implementations of NIS ;-)

Sounds like more trouble than it's worth.
Right now I am leaning towards Kerberos or LDAP.
Need to learn more about them to see their strengths and weaknesses and 
how it would fit into our existing extructure.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20051018103540.K28109>