Hi Dave,

        First look at using JAAS (at java.sun.com). This will give you a common API
that can use practically any authentication source.

You can set up linux to use a few different authentication methods using
PAM - "pluggable Authentication Module". This feature is usually installed
in the normal server installation, but set to use the usual passwd file
(shadowed etc.) by default.

Windows & linux (and I believe apache - anyone done it?) support
authentication via Kerberos which is basically LDAP. Windows calls it
ActiveDirectory. One issue here, I believe you can't do SSL LDAP queries on
Linux/mx at the moment (Jesse ? )

As for web site authentication, in apache you can use the .htaccess file to
auth. users ...


Justin - no Linux expert :-)



> -----Original Message-----
> From: Dave Wilson [mailto:[EMAIL PROTECTED]]
> Sent: 13 December 2002 09:54
> To: CF-Linux
> Subject: What are the alternatives to NT authentication?
>
>
> Hi all,
>
> My applications are designed to make use of the windows network
> login id via
> cgi.remote_user on a windows VPN. I was wondering if anybody knew
> how I'd go
> about porting this feature over to a linux platform? What authentication
> options are available to me?
>
> The VPN infrastructure is still in the planning stages so I will have the
> option at looking into other authentication server platforms. The actual
> authentication merely authenticates the user to the VPN network
> (preferrably
> using their existing network login credentials) from a variety of remote
> branch networks (presumably Windows networks, mostly) to allow the user
> access to our suite of tools. The rules and policies are handled by the cf
> application itself, which merely requires the cgi.remote_user variable for
> db lookup purposes. I'm wondering if Kerberos may be the way to go as (to
> the best of my knowledge) it is supported by both windows and linux
> platforms, or perhaps I can stick with using NT authentication for the VPN
> and have the NT account details available to my linux boxes?
>
> Any thoughts much appreciated,
> Dave
>
>
> 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=14
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=14
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.

                                Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.14

Reply via email to