Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 11 Sep 1996 00:22:02 -0400 (EDT)
From:      Matt Hamilton <matt@boris.clintondale.com>
To:        Peter Childs <pjchilds@imforei.apana.org.au>
Cc:        Richard J Uren <richard@thehub.com.au>, freebsd-isp@FreeBSD.org
Subject:   Re: Recommendations on password management.
Message-ID:  <Pine.BSF.3.95.960911001808.161B-100000@boris.clintondale.com>
In-Reply-To: <199609111249.MAA19915@al.imforei.apana.org.au>

next in thread | previous in thread | raw e-mail | index | archive | help
>  The section in the handbook on kerbos looks interesting.   I don't know
>  how it would work across a distributed system, but it might be worth
>  looking into a bit closer.

I know of a sysop that is trying to hack radius authentication into the
logon for his machines.  So when a user enters their usename and password
it is encrypted and sent to a central radius server (that also controls
the Portmasters and Ascends) for verification.  This seems like a pretty
good solution as it is secure and easily scalable and it fits in easily
with his existing setup (as he already has a radius server for it to
connect to).  To make the job EVEN easier his user accounting package
(UTA) has or is (I'm not sure this was a while ago) come out with a radius
add on for their package.  This means that the users info is entered once
when the user subscribes and that's it!

-Matt




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.960911001808.161B-100000>