[Freedombox-discuss] Kerberos and remctl instead of exmachina?
Quoting Petter Reinholdtsen (2013-09-01 14:16:56)
> Hi. Would it be an idea to provide Kerberos authentication in
> freedombox, and use remctl instead of exmachina for root execution?
>
> The exmachina source seem to be fairly new and unproven, while remctl
> is already used in production at Stanford, see <URL:
> http://www.eyrie.org/~eagle/journal/2013-08/003.html > for a blog post
> about this usage. Kerberos have the advantage of never sending the
> password over the net, and providing support for single sign on for
> services that support it.
I am still unfamiliar with exmachina, but seems to me that its purpose
is to handle execution of cross-account yet same-host, whereas purpose
of remctl seems to be remote-host execution.
Seems wrong for me to expect non-technical users of some "black box" to
be in possesion of Kerberos-enabled systems needed for controlling their
box.
...but I suspect I am simply missing something obvious here...
- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
[x] quote me freely [ ] ask before reusing [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20130901/57887292/attachment.sig>
Reply to: