atom feed8 messages in org.freebsd.freebsd-ispDistributed authentication. Which one?
FromSent OnAttachments
Francisco ReyesOct 14, 2005 6:16 pm 
Peter CluttonOct 14, 2005 10:21 pm 
Francisco ReyesOct 15, 2005 10:33 am 
Aaron GlennOct 15, 2005 3:51 pm 
Francisco ReyesOct 15, 2005 10:04 pm 
Tillman HodgsonOct 17, 2005 1:33 pm 
FranciscoOct 18, 2005 7:40 am 
Tillman HodgsonOct 18, 2005 8:09 am 
Subject:Distributed authentication. Which one?
From:Francisco (fran@natserv.net)
Date:Oct 18, 2005 7:40:49 am
List:org.freebsd.freebsd-isp

On Mon, 17 Oct 2005, Tillman Hodgson wrote:

It has some interoperability and security issues. They're solvable, IMO.

Thanks for the feedback.

I guess a good test is to ask.. what would you use? :-)

For example, most of the security concerns can be addressed with a combination of transport-mode IPsec and Kerberos and I avoid inter- operability issues by avoiding weird implementations of NIS ;-)

Sounds like more trouble than it's worth. Right now I am leaning towards Kerberos or LDAP. Need to learn more about them to see their strengths and weaknesses and how it would fit into our existing extructure.