The real trick is setting up the VPN securely. :) Jason A. Pattie wrote:
> If you used IPSec, yes, you would be establishing a VPN between each > workstation and the server. But this will secure all traffic, from > the NFS root mount to the XDMCP request, to the login and > authentication from the display manager. Once the VPN connection is > established, every aspect of network traffic would be at that point > encrypted and more secure. It would slow things down a bit, but I'm > sure you're used to that with ssh. You could also use the VPN > connection instead of tunneling through ssh (or in addition to > tunneling through ssh) to help with the problems you are seeing with > ssh and security. > > Dumas Patrice wrote: > >> On Tue, Oct 02, 2001 at 09:22:31AM -0400, Jim McQuillan wrote: >> >>> Pat, >>> >>> Why not just use IPSec, then everything would be encrypted between >>> the workstation and the server. >>> Including X and NFS. >>> >>> Jim. >>> >> >> My question was a bit of academic, in fact. I allready use vnc in >> ssh, but I >> wanted to know whether it would be possible with X and not only vnc. >> >> Why not use IPSec ? Hmm, the reason is that I know ssh, and not IPSec >> ;-). I >> also suspect that it is harder to manage, but I may be wrong. It also >> seems to >> me that the IPSec doesn't really do the same thing than ssh, and >> maybe ssh is >> better suited for authentication (and IPSec for doing a VPN ?). But I >> have no >> real knowing of all that stuff. I also know that ssh has some flaws, >> but I >> think that's not a problem for the degree of security I want. >> >> Pat >> >> _____________________________________________________________________ >> Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: >> https://lists.sourceforge.net/lists/listinfo/ltsp-discuss >> For additional LTSP help, try #ltsp channel on irc.openprojects.net >> > -- Jason A. Pattie [EMAIL PROTECTED] _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.openprojects.net
