Authentication Mechanisms

Home FAQ Download
User Guide Applications Internals
License Publications Contact

Authentication Mechanisms

Mechanism
Description
Null Authentication
"nullauth" creates and distributes random pair key in the clear.
Note: this should not be used in production systems.
ConfigMeaning/Value
retries Number of attempts at authentication (integer, > 0)
interval Interval (in seconds) between authentication attempts (integer, > 0)
crypt Cryptographic algorithm used to secure authentication protocol (enum, values "des")

SSL Authentication
"sslauth" Creates and distribute a random pair key over SSL mutually authenticated channel. This mechanism assumes the existance of certificate files for the local user and the public key certificate file for the CA are available. The public and private files should be named by the local identity (as defined by the NAME environment variable). For example, the local user "bob" requires the public (private) key file in the specificed directory be named bob.pub (bob.priv). This public key certificate must be issued (signed with) by the certificate of the CA private key associated with the public key file described in the "cafile" filename. For example, if the CA public is placed on the local machine in the file ca.pub file, the "cafile" parameter should be specified by "cafile=ca" in the policy.

The acert application provides interfaces for creating a CA and user certificates.
ConfigMeaning/Value
retries Number of attempts at server locate (integer, > 0)
interval Interval (in seconds) between locate attempts (integer, > 0)
crypt Cryptographic algorithm used to secure authentication protocol (enum, values "des")
sslport TCP port number for server. Used to "listen" for incoming authentication requests.
cafile Filename of trusted CA.


Factotem Inc, Antigone Version 2.0.10, Nov 18, 2002
antigone@factotem.com
Antigone Home