Adam J. Bradley wrote:
Hi all,
I've been searching for an implementation of VNC which uses either PAM or Kerberos as its authentication method in order to provide single sign-on to Xvnc server sessions.
Is this facility available/possible/desireable. I'd be happy to kick
off a project to get this going as I've been learning a lot about
Kerberos and PAM in recent times!
In late 2002 I looked around at authentication mechanisms for VNC. I did not find any implemented alternatives to standard RFB3 authentication so I set out to implement SRP (http://srp.stanford.edu/). For reasons too painful to go into this was never released. I still believe SRP is the most appropriate authentication scheme for common usage (i.e. when carrying about security data, physical or biometric authentication is not practical), but I am not a security expert. Both Kerberos and PAM would be interesting though, with their own pros and cons, as might the various kinds of Windows authentication.
Good luck if you decide to go for it, and please keep me or the list informed of your progress.
Dickon _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
