[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Authentication/Authorization Recommendations



Hello,

Jason.McGlamary@Medstar.net writes:

[...]
>       I have 2 file and DB servers installed with RH9 (1 is to provide
> redundancy).  I do not want to trust the company NT PDC for authentication
> to my servers, and would rather handle all authentication/authorization for
> our servers myself (mainly limited to a single division of the company).
> The environment for the whole house is Windows based (mostly Win98), so
> I'll need to be running Samba for the file sharing aspect.  Security from
> the outside world will be provided by the company firewall, but I believe
> I'd still prefer to secure all communications (no plaintext; passwords or
> otherwise).  I want OpenLDAP to provide authentication to my servers as
> well as manage groups for authorization to shares.  I'd like users to be
> able to manage their own passwords (securely), and all authorization
> handled by LDAP.
>
>       In short, my basic need is to determine how to best configure
> openldap for best security while maintaining easy account management for my
> users.  I do not really want to make my own PDC though as most docs dealing
> w/ Openldap and Samba together seem to lean towards.  The main area that's
> been boggling me thus far is the function of SASL, and how to choose a
> mechanism to use.
[...]

Win98 is the bottleneck, but with W2000 and XP you could use pGina.
http://pgina.xpasystems.com/index.php

-Dieter

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de