wiki:space:projects:authentication
This is an old revision of the document!
Table of Contents
Authentication
Why?
We will use different tools which require authentication.
wiki, chat, wlan, ssh logins, …
One identity source would be nice.
Access rights could be granted to groups.
Otherwise we need to create user accounts in every system, manage rolls in every system, …
Username/Password is outdated. MFA solutions provide more security.
Protocols
- ldap is supported in a lot of software
- wlan 802.1x is using radius
- OTP solutions are often based on Radius
- kerberos is maybe more secure
- SAML is often use for cloud services
- TACACS is used for switches an other network devices
Tools
| Name | ldap | radius | kerberos | SAML | TACACS | ssh key | MFA | self-hosted | costs / license | |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft Active Directory | ||||||||||
| FreeIPA | ||||||||||
| privacyidea | ||||||||||
| linotp | ||||||||||
| clearos | ||||||||||
| zentyal | ||||||||||
| rcdevs | ||||||||||
| wikid | ||||||||||
| goSA | ||||||||||
| UCS | ||||||||||
| samba 4 | ||||||||||
| Apache Directory | ||||||||||
| 389 Directory | ||||||||||
| nethserver | ||||||||||
| [http://www.koozali.org | koozali]] | |||||||||
| pfsense | ||||||||||
| duo | ||||||||||
| authy |
wiki/space/projects/authentication.1503235934.txt.gz · Last modified: by trinitor
