d

Authentication: The Complete Documentation

• This category contains 4 Papers
• The last paper was added on 2007-03-26 (YYYY-MM-DD)

Authenticating Linux users with IBM Directory Server

Published on September 15, 2003, by Ming Xia, ©IBM.

This article describes how to use the IBM Directory Server to authenticate Linux users. The author explains step-by-step how to configure Directory Server, and Linux, to build a basic configuration to use Directory Server to authenticate Linux users.

Hardening Linux authentication and user identity

Published on 2004-09-23, by John H. Terpstra, Paul Love, Ronald P. Reck, Tim Scanlon, ©OSTG, Inc..

PAM is an authentication mechanism that originated on Solaris, but is used on various systems, including Linux. The Linux PAM implementation allows a system administrator to choose how users authenticate to various services. New modules can be added by an administrator at any time, offering overall flexibility in how authentication happens.

Hardening the PAM framework

Published on 2004-09-24, by John H. Terpstra, Paul Love, Ronald P. Reck, Tim Scanlon, ©OSTG, Inc..

In yesterday's article we began looking at how PAM can securely authenticate Windows users. Today we'll check the PAM framework, harden the basic services that we expect to authenticate to, and look at new PAM modules that might make our systems more secure.

Simplify enterprise Java authentication with single sign-on

Published on September 09, 2003, by Faheem Khan, ©IBM.

As you add more and more password-protected applications to your organization's computing environment, you add authentication complexity that will burden both developers and users. Most enterprise application integration projects include single sign-on (SSO) functionality, which allows users to log in once to use a range of different applications. In this article, consultant Faheem Khan shows you how to implement SSO on the Java platform. Security is a tricky subject, but you'll see how you can use the GSS-API and Kerberos standards to abstract away some of the difficulty, and implement an SSO-based architecture with relative ease.