radius authentication

[Chris Ochs]

Has anyone ever taken a look at adding radius authentication to
Postgresql? I know it's not terribly secure in itself, but some 2
factor authentication schemes like Cryptocard use it for verifying one
time passwords, and at least in our case having 2 factor
authentication for remote access would be really nice.

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddres sHere" to majordomo@postg resql.org)

[Alvaro Herrera]

Re: radius authentication

On Mon, Sep 06, 2004 at 01:28:38AM -0700, Chris Ochs wrote:[color=blue]
> Has anyone ever taken a look at adding radius authentication to
> Postgresql? I know it's not terribly secure in itself, but some 2
> factor authentication schemes like Cryptocard use it for verifying one
> time passwords, and at least in our case having 2 factor
> authentication for remote access would be really nice.[/color]

At least in theory, you should be able to configure PAM to talk to
Radius, and have Postgres use PAM. (If there is a Radius module for
PAM, that is).

What I think would be a nice addition to authentication mechanism would
be SASL.

--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
A male gynecologist is like an auto mechanic who never owned a car.
(Carrie Snow)


---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo@postg resql.org