Category CS P09 Central Authentication

Abstract The Dearborn Christian School has a computer lab filled with a number of

unsecured computers. The administrators of that school would like them to

be secured using a centralized authentication system, in each computer

shares the same user accounts data. However, there are two main

obstacles: all of the computers have Microsoft Windows XP installed and

there is no Microsoft Windows ``Server Edition'' license. To complicate

matters, some of the copies of Windows XP are of the ``Home Edition'' for

which Microsoft disabled joining ``Domains'' which allow a form of

centralized authentication.



The school has had a GNU/Linux based server running an old version of

Redhat to provide shared file storage with minimal security to secure the

few files important to the school. This project is the upgrading and

administering of this server while preparing and building a centralized

authentication system that does not require using either the ``Professional

Edition'' or ``Server Edition'' of Windows. The result should give the school

a security and networking setup similar to many universities: each client

will run Windows which accesses a GNU/Linux (``Unix'')-based back-end.





To reach this goal, the following existing technology/software will be

leveraged and, as they are designed to be, interconnected: Samba,

Windows XP, pGINA, MIT-Kerberos5, OpenLDAP, and GNU/Linux

(Gentoo). Though each of these technologies is simple to use

independently, work has to be done to glue them together.

Bibliography http://www.openldap.org/doc/admin24/ (LDAP and

OpenLDAP)http://www.gentoo.org/doc/en/index.xml (Gentoo GNU/Linux)
First Previous Next Last