radius authentication

[Chris Ochs]

Has anyone ever taken a look at adding radius authentication to
Postgresql? I know it's not terribly secure in itself, but some 2
factor authentication schemes like Cryptocard use it for verifying one
time passwords, and at least in our case having 2 factor
authentication for remote access would be really nice.

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to ma*******@postgresql.org)

[Alvaro Herrera]

On Mon, Sep 06, 2004 at 01:28:38AM -0700, Chris Ochs wrote:

Has anyone ever taken a look at adding radius authentication to
Postgresql? I know it's not terribly secure in itself, but some 2
factor authentication schemes like Cryptocard use it for verifying one
time passwords, and at least in our case having 2 factor
authentication for remote access would be really nice.

At least in theory, you should be able to configure PAM to talk to
Radius, and have Postgres use PAM. (If there is a Radius module for
PAM, that is).

What I think would be a nice addition to authentication mechanism would
be SASL.

--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
A male gynecologist is like an auto mechanic who never owned a car.
(Carrie Snow)
---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to ma*******@postgresql.org