Re: getpwnam with md5 encrypted passwds

From: Terry Lambert (tlambert2_at_mindspring.com)
Date: 11/27/03

  • Next message: Terry Lambert: "Re: getpwnam with md5 encrypted passwds" 
    Date: Wed, 26 Nov 2003 23:10:01 -0800
To: Clifton Royston <cliftonr@tikitechnologies.com>

    Clifton Royston wrote:
    > If you will need to do authentication after your program drops
    > privileges, your best course is probably to go through PAM, to install
    > a separate daemon which implements a PAM-supported protocol and which
    > runs with privileges, and then to enable that protocol as a PAM
    > authentication method for your application.

    [ ... RADIUS example with LDAP mention ... ]

    Sounds like a good approach, though I'll point out that had
    you tried LDP, you would have been hard-put to use LDAP as a
    proxy protocol to another authentication base (a PAM backend
    for an LDAP server, while not quite impossible, would be very
    hard).

    How did you avoid the recursion problem of the RADIUS server
    trying to authenticate via pam_radius to the RADIUS server
    tyring to authenticate ...

    -- Terry?

    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"

  • Next message: Terry Lambert: "Re: getpwnam with md5 encrypted passwds"

    Relevant Pages

    • Re: OpenSSH and pam_krb5
      ... > with GSSAPI and PAM authentication. ... this data is present in a separate process (the "authentication ... application (ie sshd). ...
      (SSH)
    • Re: Solaris 9 authentication and access control into Active Directory
      ... implement a user within your Active Directory for the machine, ... As others have mentioned there's PAM samba SMB integration. ... Recently I've been using LDAP authentication. ...
      (Focus-SUN)
    • Re: Understanding LDAP or MS Active Directory authenticationand Informix
      ... Hopefully we can upgrade to IDS 10 once Orrible certs PeopleSoft Tools ... Understanding LDAP or MS Active ... I know the LDAP support is through PAM. ... when you make the authentication call to the OS, ...
      (comp.databases.informix)
    • Re: getpwnam with md5 encrypted passwds
      ... > Clifton Royston wrote: ... >> runs with privileges, and then to enable that protocol as a PAM ... >> authentication method for your application. ...
      (freebsd-hackers)
    • Re: getpwnam with md5 encrypted passwds
      ... > dropped root privileges either. ... If you will need to do authentication after your program drops ... and then to enable that protocol as a PAM ... at least authenticate without needing root privileges itself. ...
      (freebsd-hackers)