Thread: radius authentication

radius authentication

From
Chris Ochs
Date:
Has anyone ever taken a look at adding radius authentication to
Postgresql?  I know it's not terribly secure in itself, but some 2
factor authentication schemes like Cryptocard use it for verifying one
time passwords, and at least in our case having 2 factor
authentication for remote access would be really nice.

Re: radius authentication

From
Alvaro Herrera
Date:
On Mon, Sep 06, 2004 at 01:28:38AM -0700, Chris Ochs wrote:
> Has anyone ever taken a look at adding radius authentication to
> Postgresql?  I know it's not terribly secure in itself, but some 2
> factor authentication schemes like Cryptocard use it for verifying one
> time passwords, and at least in our case having 2 factor
> authentication for remote access would be really nice.

At least in theory, you should be able to configure PAM to talk to
Radius, and have Postgres use PAM.  (If there is a Radius module for
PAM, that is).

What I think would be a nice addition to authentication mechanism would
be SASL.

--
Alvaro Herrera (<alvherre[a]dcc.uchile.cl>)
A male gynecologist is like an auto mechanic who never owned a car.
(Carrie Snow)