Send inn-workers mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.isc.org/mailman/listinfo/inn-workers
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of inn-workers digest..."
Today's Topics:
1. Re: private newsgroups & collabra server? (Julien ?LIE)
2. Re: private newsgroups & collabra server? (Miles Fidelman)
3. Re: private newsgroups & collabra server? (Thomas Hochstein)
----------------------------------------------------------------------
Message: 1
Date: Fri, 8 Apr 2016 22:02:07 +0200
From: Julien ?LIE <[email protected]>
To: [email protected]
Cc: [email protected]
Subject: Re: private newsgroups & collabra server?
Message-ID: <[email protected]>
Content-Type: text/plain; charset=windows-1252; format=flowed
Hi Miles,
> Anybody here remember the old Netscape Collabra server (acquired
> from Collabra)? It provided some really nice features for setting up
> private newsgroups (e.g., for use within a company and as an
> alternative to email lists) - with a nice GUI that made it easy for
> folks other than sys admins to set up groups.
>
> I'm looking for similar capabilities - either using INN, or another
> news server. Can anybody offer some guidance or suggestions, or at
> least a starting point? (For that matter, anybody happen to know what
> happenedto the Collabra code and/or the developers?)
INN unfortunately does not come with "a nice GUI" so I bet it won't be
suiting your needs.
Are you looking for a news server running on Linux, Windows, or another OS?
In case you can use Windows, I recommend you the nice CodoSoft NNTPd
news server: http://www.codosoft.com/en/
I hope it is the kind of server you are looking for.
--
Julien ?LIE
? The hardest thing is to go to sleep at night, when there are so many
urgent things needing to be done. A huge gap exists between what we
know is possible with today's machines and what we have so far been
able to finish. ? (Donald Knuth)
------------------------------
Message: 2
Date: Fri, 8 Apr 2016 16:19:22 -0400
From: Miles Fidelman <[email protected]>
To: [email protected]
Subject: Re: private newsgroups & collabra server?
Message-ID: <[email protected]>
Content-Type: text/plain; charset=windows-1252; format=flowed
On 4/8/16 4:02 PM, Julien ?LIE wrote:
> Hi Miles,
>
>> Anybody here remember the old Netscape Collabra server (acquired
>> from Collabra)? It provided some really nice features for setting up
>> private newsgroups (e.g., for use within a company and as an
>> alternative to email lists) - with a nice GUI that made it easy for
>> folks other than sys admins to set up groups.
>>
>> I'm looking for similar capabilities - either using INN, or another
>> news server. Can anybody offer some guidance or suggestions, or at
>> least a starting point? (For that matter, anybody happen to know what
>> happenedto the Collabra code and/or the developers?)
>
> INN unfortunately does not come with "a nice GUI" so I bet it won't be
> suiting your needs.
>
> Are you looking for a news server running on Linux, Windows, or
> another OS?
> In case you can use Windows, I recommend you the nice CodoSoft NNTPd
> news server: http://www.codosoft.com/en/
> I hope it is the kind of server you are looking for.
>
Julien,
Thanks, but we're running Linux - I can't really see running a
production server under Windows.
A follow-up question though - I know that INN (and NNTP) have some
authentication capabilities - but what I'm still trying to figure out is
whether
these are local only, or whether there are any global authentication
capabilities for newsgroup access (e.g., encryption of messages under a
shared key, or distributed access control using Kerberos).
Thanks again,
Miles
--
Miles Fidelman, Principal
Protocol Technologies Group, LLC
617-538-9249 - [email protected]
------------------------------
Message: 3
Date: Sat, 09 Apr 2016 13:50:06 +0200
From: Thomas Hochstein <[email protected]>
To: [email protected]
Subject: Re: private newsgroups & collabra server?
Message-ID: <[email protected]>
Content-Type: text/plain; charset=us-ascii
Miles Fidelman schrieb:
> A follow-up question though - I know that INN (and NNTP) have some
> authentication capabilities - but what I'm still trying to figure out is
> whether these are local only, or whether there are any global
> authentication capabilities for newsgroup access (e.g., encryption
> of messages under a shared key, or distributed access control using
> Kerberos).
INN supports external programs for authentification, see
<https://www.eyrie.org/~eagle/software/inn/docs-2.6/external-auth.html>.
Examples shipped with INN include:
- ckpasswd:
| ckpasswd accepts a username and password from nnrpd and tells nnrpd(8)
| whether that's the correct password for that username. By default,
| when given no arguments, it tries to check the password using PAM if
| support for PAM was found when INN was built. Failing that, it tries
| to check the password against the password field returned by
| getpwnam(3).
- auth_krb5:
| This program does authentication for nnrpd against a Kerberos v5 KDC.
| This is NOT real Kerberos authentication using service tickets;
| instead, a username and password is used to attempt to obtain a
| Kerberos v5 TGT to confirm that they are valid. As such, this
| authenticator assumes that nnrpd has been given the user's username
| and password, and therefore is not as secure as real Kerberos
| authentication. It generally should only be used with NNTP over TLS
| to protect the password from sniffing.
|
| Normally, you do not want to use this authenticator. Instead, use
| ckpasswd with PAM support and configure the nnrpd PAM stack to use a
| Kerberos PAM module. A full Kerberos PAM module is more sophisticated
| about how it validates passwords and has a much broader array of
| options than this authenticator.
- radius:
| radius is an nnrpd authenticator, accepting a username and password
| from nnrpd (given to nnrpd by a reader connection) and attempting to
| authenticate that username and password against a RADIUS server.
You can modify one of them to suit your needs or roll your own.
It is quite possible to set INN up, using Kerberos or a SQL database
for authentification, with user accounts managed using a GUI or a web
app (you'd most probably had to create yourself); and you could manage
creation, modification or deletion of local newsgroups by a GUI tool
or a web app, too. It shouldn't be too hard to whip something up in
that way.
Regards,
-thh
------------------------------
_______________________________________________
inn-workers mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/inn-workers
End of inn-workers Digest, Vol 83, Issue 5
******************************************
