Files
openNDS/forward_authentication_service
Rob White a7ef01f413 Enable https protocol for remote FAS
Previously a remote FAS could not use https protocol without generating
browser security errors or warnings so NDS enforced use of http.

A new FAS level, fas_secure_enabled = 3 is introduced here.

Level 3 is the same as level 2 except the use of https protocol is
enforced for FAS. In addition, the "authmon" daemon is loaded.

This daemon allows the external FAS, after client verification is complete,
to effectively traverse inbound firewalls and address translation to
achieve NDS authentication without generating browser security warnings.
or errors.

A fully functional https fas script is provided (fas-aes-https.php).

Signed-off-by: Rob White <rob@blue-wave.net>
2020-02-29 16:50:07 +00:00
..
2018-09-27 09:25:22 +01:00
2020-01-09 09:34:26 +00:00
2020-02-29 16:50:07 +00:00
2020-01-09 09:34:26 +00:00

Forwarding Authentication Service (FAS)

Author: Rob White @bluewavenet - BlueWave Projects and Services
Copyright (C) 2015-2020 BlueWave Projects and Services. This software is released under the GNU GPL license.

Nodogsplash (NDS) supports external (to NDS) authentication with with simple config options.
In addition, Binauth can be configured to be operational at the same time as FAS to provide post authentication processing.