X-Git-Url: https://git.openafs.org/?p=openafs-wiki.git;a=blobdiff_plain;f=AFSLore%2FGettingAuthenticated.mdwn;h=efc679b38e0061ab8a70117d1b7e90f4dd4a6e16;hp=5810cafe4f7298513c35a767bc8e1da4d322a58a;hb=5c080c6b21e383df5390673a9a12de0b5768894d;hpb=2ae3b17de2aa070c26f5da2381215e0f8f06c750
diff --git a/AFSLore/GettingAuthenticated.mdwn b/AFSLore/GettingAuthenticated.mdwn
index 5810caf..efc679b 100644
--- a/AFSLore/GettingAuthenticated.mdwn
+++ b/AFSLore/GettingAuthenticated.mdwn
@@ -1,4 +1,4 @@
-I am not the right person to write this page, but here is a rough outline.
+This is a rough outline.
There are basically three options with several variants
@@ -31,8 +31,6 @@ For [[KerberosV]], there are two main open-source solutions for Unix: [[Kerberos
Note that you can mix-and-match. Currently I'm using a [[HeimdalKTH]] KDC with [[KerberosVMIT]] clients. If you take this route the one big thing to watch out for is administrative tools - kadmin, kpasswd, and such.
--- [[TedAnderson]] - 22 Jan 2002
-
Some other topics that should be explained.
- SSH -- There are two issues. First is mutually authenticating you and the SSH server to each other using Kerberos. See [[KerberosV]] for a link to patches to kerberize [[OpenSSH]]. Second is passing local AFS authentication to the remote shell (in this case an AFS Client) in the form of AFS service tickets (tokens).
@@ -46,8 +44,10 @@ Some other topics that should be explained.
- [[AccessControlLists]] (aka ACLs).
- IP ACLs
- How to configure various authentication servers to issue tickets (tokens) with lifetimes longer than 25 hours.
+- Integration with NIS. See the [[GeneralFAQ#1_05_d_Improved_security]], but basically you use NIS vis NSS for names of users and Kerberos via PAM for authentication. There is still the question of integrating group management.
+- [[OtherGroupServers]] are not well integrated as far as I know. The big ones are [[ActiveDirectory]] and [[NIS]] and maybe some LDAP systems. While one could imagine wrapping a [[PtServer]] interface around such a thing, there are probably some features that would make seamless integration difficult. Has anyone seriously looked into this?
--- [[TedAnderson]] - 23-24, 29 Jan 2002 -- [[JasonGarman]] - 30 Jan 2002
+-- [[TedAnderson]] - 22-24, 29 Jan 2002
-- [[JasonGarman]] - 30 Jan 2002
-- [[TedAnderson]] - 06 Feb 2002
----