* klik (klikunstable.org) [020406 21:46]:
> check out LDAP
>
> ----- Original Message -----
> From: "Douglas K. Rand" <randmeridian-enviro.com>
> To: <freebsd-securityfreebsd.org>
> Sent: Saturday, April 06, 2002 6:43 PM
> Subject: Centralized authentication
>
>
> > We have a few dozen FreeBSD workstaions and servers and as their
> > numbers increase managing users and groups via indvidual /etc/passwd
> > and /etc/group files is getting more and more tiresome. We also have
> > just a few Linux boxes.
> >
> > We aren't a huge site, everybody is in one building on the same
> > network.
> >
> > I was wondering what other sites are using to solve this problem.

I'd highly suggest the oft-little understood but incredibly deserving
Kerberos. I truly believe that if it were better documented and understood by
the masses of administrators out there, it would blow away current network
authentication systems. Heck, Microsoft used it to totally revitalize their
network authentication scheme to enormous benefit. Sadly, they then broke it
for anyone who isn't them.

-- 
Benjamin Krueger
"Life is far too important a thing ever to talk seriously about."
- Oscar Wilde (1854 - 1900)
----------------------------------------------------------------
Send mail w/ subject 'send public key' or query for (0x251A4B18)
Fingerprint = A642 F299 C1C1 C828 F186  A851 CFF0 7711 251A 4B18
To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]