Shishi is GNU implementation of the Kerberos 5 network authentication system. Shishi can be used to authenticate users in distributed systems. Current work items include improvements on the server (KDC), integration of initial authentication via OpenPGP using GnuTLS, set-passwd implementation, and a LDAP backend for the Shisa library used in the KDC for information storage.

The intent of this article is to show you how to configure your Linux machine and Samba server to participate in a Windows 2003 Active Directory domain as a Member Server using Kerberos authentication. This involves using the security = ADS security mode in Samba.

I run a master and slave Kerberos servers, which requires setting up kprop to run regularly on the master server in order to transfer any changes to the slave server.

Through real world business scenarios, developers will learn to protect their web applications from attacks using Spring Security 3 and implement basic authorization and credential storage. Readers will be introduced to basic fundamentals of Spring Security 3 like setup and configuration as well as security concepts and techniques.

Traditionally, configuring Ubuntu servers to integrate with Microsoft Active Directory was not a lot of fun.  It wasn't exactly difficult, but it involved editing lots of PAM and Kerberos configuration files, and often some perilous trial-and-error.  But these days, there's a better way - for many situations, at least - and it's called Likewise.  Here's how it works, and why I think it's so gre

This article describes configuration techniques of module mod_ssl, which extends a functionality of Apache HTTPD to support SSL protocol. The article will deal with authentication of server (One-way SSL authentication), as well as it will also include authentication of clients by using certificates (Two-way SSL authentication).

Samba 4, currently the alpha development of Active Directory for Linux and Unix, has been in parallel development with Samba 3. Allison says "The ultimate goal for Samba 4 will be to merge with the Samba 3 file server code, something that is called "Frankie" internally, after Frankenstein, the merging of the body parts...

Here begins the lesson on Embrace, Extend and Extinguish (EEE). Classically, this technique is used to perpetuate vendor lock-in by introducing small incompatibilities into a standard interface, in order to prevent effective interoperability, or (shudder) even substitutability of competing products based on that interface. This EEE strategy has worked well so far for Microsoft, with the web browser, with Java, with Kerberos, etc. It is interesting to note that this technique can work equally well with Microsoft's own standards, like OOXML.

The default installation of MongoDB doesn't enable authentication which is essentials for securing contents. The articles describes step by step commands to create a replica-set in MongoDB using multiple ec2 instances having authentication enabled as well as proper security for member server of replica-set.