Linux/Windows Authentication?

From: MARTIN M. Bénoni (benoni_martin_at_hotmail.com)
Date: 02/26/04

  • Next message: a55mnky_at_yahoo.com: "NMAP - 3.50 changes mstask.exe?" 
    To: pen-test@securityfocus.com
Date: Thu, 26 Feb 2004 15:40:21 +0000

    Hi list!

    I am looking forward to know if there is a way to meet this following
    requirement:

    We are setting up an Intranet. On it, each department will be allowed to =
    access a part of the server, for example HR Department will be allowed = to
    access just http://intranet/HR, Financial Department will just be = allowed
    to access to http://intranet/Finance, and so on. As they are = no-IT people,
    we would be looking for a transparent way to authenticate = them and to
    block someone from one department to access a file from = another
    department. User/password may be tough to set up as they will = have to
    remember them and we will have to check if they are not using = weak
    passwords. A PKI/Kerberos/... -based solution would be long to set = up as
    well. I was thinking about some key-based authentication, as it = can
    usually be done with ssh. But looking around the Internet for some =
    information, no way to find out some clues... Moreover, all the clients =
    will be Windows 2000/XP, and our Intranet runs under Linux (Redhat 9.0). =
    Some ideas? :-)

    Authentication based on IP addressees would be the easiest solution I = have
    been thinking about, but remains to know if I can tell my Linux box = to
    allow a given bunch of IP addresses to access just a given = directory...

    And of course, thanks in advance for the replies!

    Bénoni-

    _________________________________________________________________
    Tired of spam? Get advanced junk mail protection with MSN 8.
    http://join.msn.com/?page=features/junkmail

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: a55mnky_at_yahoo.com: "NMAP - 3.50 changes mstask.exe?"

    Relevant Pages

    • Re: Urgent - need help with logging anonymous and Active Dir users without login form
      ... networks behind the same firewall. ... automatically logged in to our intranet in. ... forms authentication for everything. ... the user back to the page the access which initiated the login request. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Constant Password Authentication
      ... domain and server name in the URL. ... confirm that the same authentication methods are checkmarked as compared to ... Within our organisation there are staff who are ... > Up until recently a company that has had access to our intranet had been ...
      (microsoft.public.inetserver.iis.security)
    • RE: Windows authentication from ASP.NET to SQL Server
      ... The easiest way is to turn off anonymous access for the Intranet site. ... will force authentication, usually through a login box (although the network ... > intranet server and our database server, both of which are on our local ... > Successful Network Logon: ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: User Identity
      ... If you want certain parts of the site to be only for intranet users, ... >>Integrated Authentication. ... >>Kevin Spencer ... >>>>> the server.Is it anonymous access by default on the ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Intranet File Permissions Using Active Directory
      ... Open the IIS Manager, and for the Intranet website (or folder, or ... Disable "Allow Anonymous Authentication". ... access the resources should have Read permissions. ... I have a question regarding using IIS to host a Intranet site for my ...
      (microsoft.public.inetserver.iis.security)