| Re: [stellation-res] why doesn't stellationd require a "password" argument? |
On Mon, Jul 22, 2002 at 10:24:25AM -0400, Mark C. Chu-Carroll wrote: > > For a small setup, sending passwords around is OK. If they want more > > security than that, they can set up kerberos and use its ticket-granting > > capabilities. > > Ideally, I'd like to be able to do a challenge auth without having > to install kerberos. I'm just downloading and printing JAAS docs now: > how hard would it be to add a challenge auth module to JAAS? If by "challenge auth" mechanism you mean "disposable passwords" then it would not be hard at all. Do you have the "challenge auth" documented somewhere? I assume it is something like this: - user accesses resource - system prompts for password or disposable password - user enters password - system validates password - if password bad, make loud buzz. stop - system generates disposable password and hands back to the user - user accesses resource - system asks for password or disposable password - user provides disposable password - system grants access to resource Am I close? florin -- "If it's not broken, let's fix it till it is." 41A9 2BDE 8E11 F1C5 87A6 03EE 34B3 E075 3B90 DFE4
Attachment:
pgpmuz8NvJIhF.pgp
Description: PGP signature