Security Basics mailing list archives

Re: Linux basic authentication?


From: Nick Owen <nickowen () mindspring com>
Date: Tue, 14 Feb 2006 15:11:46 -0500

redcowboy () nate com wrote:
Hi, All.
I'm studying linux security.
I have two question. First of all, I heard Kerberos is window basic 
authentication protocol. then, what's linux(or Unix) basic authentication 
protocol? 
if is it there, could you explain how does it work or 
something..
Seconds, How could I understand Linux security 
concepts?
I'd ask some advices or recommends.
Thanks a lot. Have a great day!
 
Greg

Greg: Look into PAM - pluggable authentication modules:
http://en.wikipedia.org/wiki/Pluggable_Authentication_Modules

With PAM, you can use kerberos, radius, tacacs+ or other authentication
protocols that can point to various authentication mechanisms for
different services.  We have used PAM + tacacs+/radius to authenticate
users from webmail, vpn, and login using two-factor authentication.  So,
each service (sshd, su, imapproxy, login) can be set to use an
authentication protocol (kerberos, tacacs, radius, etc) to point to
different authentication servers (passwd, kerveros, or in our case,
WiKID).

HTH,

Nick


-- 
Nick Owen
WiKID Systems, Inc.
404.962.8983 (desk)
404.542.9453 (cell)
http://www.wikidsystems.com
At last, two-factor authentication, without the hassle factor
Now open source: http://sourceforge.net/projects/wikid-twofactor/

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: