Akagi201
8/2/2014 - 2:55 PM

Authentication.md

Authentication.md
content_copyfile_download
  • Rendered
  • Source

Authentication指确认一个在请求服务的用户是这个资源的有效用户.

Authentication是通过identity和credentials的描述实现的. credentials的类型有passwords, one-time tokens, digital certificates, phone numbers (calling/called).

Authentication methods

  • PAP(Plaintext-Authentication-Protocol)
  • CHAP
  • MS-CHAP
  • MS-CHAPv2
  • Windows Domain Controller Authentication (via ntlm_auth and winbind)
  • Proxy to another RADIUS server
  • System authentication (usually through unix /etc/passwd)
  • rlm_pam (PAM)
  • rlm_ldap (PAP only)
  • rlm_pam (PAP only)
  • rlm_cram
  • rlm_perl program
  • rlm_python program
  • rlm_jradius as a JRadius handler
  • SIP Digest (Cisco VoIP boxes, [http://www.iptel.org/ser/ SER])
  • A locally executed program. (like a CGI program.)
  • Netscape-MTA-MD5 encrypted passwords
  • rlm_krb5 authentication
  • X9.9 authentication token (e.g. [http://www.onlineshow.info CRYPTOCard])
  • rlm_eap wireless with embedded authentication methods
  • EAP-MD5
  • Cisco LEAP
  • EAP-MSCHAP-V2 (as implemented by Microsoft)
  • EAP-GTC
  • EAP-SIM
  • EAP-TLS
  • EAP-TTLS (with any authentication protocol inside of the TLS tunnel)
  • EAP-PEAP (with tunnelled EAP)

Refs