DoD CAC

[warmongr]

Anyone know a good forum for the Redhat Directory Server the Redhat Certificate server and/or the use of CAC cards to authenticate client logins?

Thanks,
W

 

[North323]

what issues are you running in to?

 

[warmongr]

No issue really. Thinking about implementing this and have a few questions up front.

1) Anyone ever use DoD CAC cards to authenticate client machines (mostly XP) against a RH Directory server. If it can't be done then no need to go to #2.

2) Is there a good reference (HowTo etc) for doing so provided the answer to #1 is yes.

3) Bonus question: Anyone authenticate JUNOS clients against LDAP directly (ie not via Radius/TACACS+)

War...

 

[North323]

never tried #1 but I am sure that it is possible. DoD may not like it but its possible. there are snap ons for RH that act just like AD

 

[warmongr]

Why do you think DoD would not like it? The Netscape directory server is on the NIAP list (old but on the list).

War...

 

[North323]

they are a windowz shop (for the most part). then again, depends on what arm of DoD you are referring to.