Re: Linux Authentication Architecture Question:

In article <21bc80f1-87ea-4a90-a27c-a6c646c81895@xxxxxxxxxxxxxxxxxxxxxxxxxxx>,
"shrike@xxxxxxxxxxxxxx" <shrike@xxxxxxxxxxxxxx> writes:
Howdy,

I am writing a UDP server daemon in perl, and I would like to back-end
its authentication into whatever the Linux box happens to be using for
user authentication at the moment.

In consideration of PAM, LDAP, and the legacy password authentication
system, what is the most forward compatible, and installation tolerant
way of doing this? I want to be able to distribute the daemon and
have it compile and work with various distros without a myriad of
grabastic dependencies.

The data is not sensitive to snooping, but it does need to be
authenticated. So CHAP over UDP should be sufficient. Is there a way
to pipe to "login" on the backend or something?

That sounds like either a lot of work or bad security.

If you don't want to send the password in the clear, you have
to have some sort of encryption which probably requires something
like a connection.

Why do you want to use UDP? Why not ssh or ssl/web?


--
These are my opinions, not necessarily my employer's. I hate spam.

.

Relevant Pages

  • Re: Linux Authentication Architecture Question:
    ... I am writing a UDP server daemon in perl, and I would like to back-end ... user authentication at the moment. ... LDAP is extremely powerful, but too powerful and too potentially mis-configurable or many setups. ... So CHAP over UDP should be sufficient. ...
    (comp.os.linux.security)
  • Re: Using SSPI to encrypt UDP messages
    ...  D> with some lower level protocol using UDP. ... (misused by the OP as he was trying to apply stream encryption to UDP) ... without any consistent link to authentication mechanisms. ...
    (microsoft.public.platformsdk.security)
  • Re: Using SSPI to encrypt UDP messages
    ... D> with some lower level protocol using UDP. ... First you are talking about just authentication, then you talk about some encryption (misused by the OP as he was trying to apply stream encryption to UDP) without any consistent link to authentication mechanisms. ...
    (microsoft.public.platformsdk.security)
  • Re: Linux Authentication Architecture Question:
    ... user authentication at the moment. ... PAM isn't a protocol, ... So CHAP over UDP should be sufficient. ...
    (comp.os.linux.security)
  • Re: Linux Authentication Architecture Question:
    ... user authentication at the moment. ... So CHAP over UDP should be sufficient. ... He's writing a service. ... I suspect it's a matter of configuring pam correctly by writing a pam module for the service, sticking a reference to it in a custom config file, and dropping the config file into /etc/pam.d when you install the service. ...
    (comp.os.linux.security)
Quantcast