Hi,





On 3/22/19 9:46 AM, Zombie fork wrote:
Hi,
    We are trying to explore new methods of authentication. We want to move away from the traditional password based authentication to a more secure method like using Certificates , keys etc.

Is it possible to implement this? What alternatives do we have?

Yes, please check out the Admin guide....


You can use SSL client certificate authentication:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/using-based_client_authentication


Or, SASL/GSSAPI authentication:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/sasl

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/configuring_kerberos


HTH,

Mark


Can this be applied on a specific user, ou , subtree etc.

Is there any documentation around this?

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org