Subscribe now!
The Latest
Newsletter
Featured Videos
Set up a secure virtual host in Apache
December 22nd, 2008 by Elliot Isaacson in
Setting up an https server in Apache is easy. This tutorial covers how to create and sign your ssl certificate as well as how to configure the web server.
Recently Popular
From the Magazine
January 2009, #177
It's a battle as old as time: good vs. evil. Fortunately, Linux and FOSS are on our side as we wage the battle against those who try to steal our secrets and invade our systems.
Checking your system's security is best done sooner rather than later. Test the locks with our article on security verification; find out how to use PAM to help secure your systems; use MinorFS and AppArmor to implement discretionary access control; learn more about Samba security in part III of our series; use Darknet to help detect bots and secure your systems; use the Yubikey to increase your site's security; and don't forget to lock the doors, because a cold boot attack could render your security useless if somebody has physical access to your computer.
But, we're not just about sowing the seeds of fear. We also show you how to use memcached in Rails, how to manage multiple servers efficiently, how to deploy applications easily with Capistrano, how to manage your videos with MythVideo, how to mix it up a bit (your audio that is), and even play a few games.
NIS|LDAP and /etc/password
On December 12th, 2001 Anonymous says:
really what I hope will result is a better YP/NIS+/LDAP auth scheme.
really how do you add people to the network ?
if you use NIS then your passwords are *really* insecure ie $ypcat passwd and a bunch of workstations with libcrack & BIG dictionary on it(this was what they used at my local Uni I cracked most passwords within 3 days (150 ultra10s)).
so NIS+ or NIS can only be used on trusted networks really.
LDAP gets around the nasty's of having to have your workstations config'd right and being a Standard so that most dir severs can export the format the problem is how many servers out there have used this and you have to use a mish mash of tools, basically no central information on how to do it or nice integrated tools.
IF liberty provide tools for networks to exist that can authenticate network users across platforms securely we will have harmony.
libcrypt should be AES based and network should be redundant with ability to serve out to the net so someone loging into a domain can authenticate from another domain e.g. bob@bob.com should be able to log into sun1.jones.com if jones.com auth server allows him and com's with bob.com for the auth tokens
really it's time for network authenication to step up and become cross platform and out there !
regards
john jones