[Spread-users] Limiting Spread access

[Jonathan Stanton]

Spread does not implement any particular access control functionality
itself. However it does support a complete API for adding access control
and authentication methods of your choice without changing Spread code.
There is a modular framework with a standard set of hooks.

The details can be found in the paper:

http://www.cnds.jhu.edu/pub/papers/ngc01_auth_framework.pdf

with some example modules and more details in:

http://www.cnds.jhu.edu/pub/papers/cnds-2001-2.pdf

In the Spread source release you can see some tiny sample modules which
provide IP based access control (you can restrict which IP addresses
clients can connect to the server from). 

Also, an example implementation of a user/password module exists in the
source code -- however this is very insecure and isn't meant to be used
itself, it is just an example.

Jonathan

On Wed, Mar 26, 2003 at 09:04:17AM -0700, Jim Vickroy wrote:
> Hello,
> 
> As a complete novice, is it possible to restrict access to a Spread
> server via user/password (or some other mechanism)?  I can not see how
> to do this from the API.
> 
> We are considering using Spread for a "public" application, but
> definitely need to control access.
> 
> Thanks.
> 
> 
> _______________________________________________
> Spread-users mailing list
> Spread-users at lists.spread.org
> http://lists.spread.org/mailman/listinfo/spread-users

-- 
-------------------------------------------------------
Jonathan R. Stanton         jonathan at cs.jhu.edu
Dept. of Computer Science   
Johns Hopkins University    
-------------------------------------------------------