On Wed, 2003-07-09 at 11:38, Tom Duerbusch wrote: > Apparently we are getting serious enough about Single Signon Security > (SSS) that we are bringing venders in. I've been asked to join in to > represent the mainframe side.
Most of the solutions I've seen ultimately boil down to using an encrypted LDAP repository as your authentication source. In which case, yes, Linux can trivially play there; that's what pam_ldap does. I'd recommend investing in a crypto coprocessor, though, if you're going to be making heavy use of it. Adam
