Differences between revisions 1 and 2
Revision 1 as of 2012-02-21 09:49:57
Size: 540
Editor: AshTyndall
Comment:
Revision 2 as of 2012-02-21 09:50:33
Size: 543
Editor: AshTyndall
Comment:
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
* Single-Sign-On between UCC machines.
* Kerberised home directory mounting allowing the merging of /away and /home without security issues.
* Enabling more UCC services to kerberise, thus extending UCC's Single-Sign-On network.
 * Single-Sign-On between UCC machines.
 * Kerberised home directory mounting allowing the merging of /away and /home without security issues.
 * Enabling more UCC services to kerberise, thus extending UCC's Single-Sign-On network.

[ASH] is currently working on a Kerberos implementation to replace the OpenLDAP authentication system the club currently uses.

This would have several advantages, including:

  • Single-Sign-On between UCC machines.
  • Kerberised home directory mounting allowing the merging of /away and /home without security issues.
  • Enabling more UCC services to kerberise, thus extending UCC's Single-Sign-On network.

The implementation currently under consideration is found at http://www.rjsystems.nl/en/2100-d6-kerberos-openldap-provider.php