Re: [Nolug] Radius & Tacacs+

> Actually, if you lock down the desktops with Group Policy properly, you
> don't have to run Unix to stay adware free. Problem is that locking down
> systems with GPOs to prevent infections is rarely done or done properly.
>
> J

And it is a time consuming affair when you run into all those specific
point apps people 'need' to run their back end / pos.
(Although I am sure after doing it enough times you would have some
pretty generic templates built that can be mangled together to
accomplish your needs)

If you use folder redirection then most directories are going to be 'ok'.

As far as security, I prefer to use krb... which has it's own set of caveats.

John, I have only ever used radius as auth for dialup (back in the
day) and wireless. tacas is fine, but I am wondering what end result
you are going for?

You have a user base already and want to give those users access to
client side windows services or... ?

On Thu, Jan 15, 2009 at 10:33 AM, Jeremy (mailing list box)
<listbox@unix-boy.com> wrote:
> Ron Johnson wrote:
>>
>> On 01/15/09 10:04, Shannon Roddy wrote:
>>>
>>> On Thu, Jan 15, 2009 at 9:45 AM, Dustin Puryear
>>> <dustin@puryear-it.com>wrote:
>>>
>>>> Normally, if a shop is just anti-AD, then I may see something like:
>>>>
>>>>
>>> There are more reasons not to use AD than just being anti-AD.
>>>
>>
>> Being pro-security?
>>
>> (This, while focused on the desktop, is a pretty damning of Windows.)
>>
>> http://philosecurity.org/2009/01/12/interview-with-an-adware-author
>>
>> S: In your professional opinion, how can people avoid adware?
>>
>> M: Um, run UNIX.
>>
>
> Actually, if you lock down the desktops with Group Policy properly, you
> don't have to run Unix to stay adware free. Problem is that locking down
> systems with GPOs to prevent infections is rarely done or done properly.
>
> J
> ___________________
> Nolug mailing list
> nolug@nolug.org
>
___________________
Nolug mailing list
nolug@nolug.org
Received on 01/15/09