On Thu, 2002-03-07 at 18:19, Jason A. Pattie wrote:
> John Cuzzola wrote:
> 
> >*** A possible solution may be to create a VPN(IPSEC) betweeen the client
> >and the server. Allow the home directory to be mounted only through the
> >VPN.
> >
> A very good solution and one that is not too hefty to implement. 
>  However, how to you store "securely" the secret keys for each 
> workstation?  The only way that I can think of a solution for this is to 
> have local storage in some form on the thin-client workstation.

The etherboot bootprom?  Its not perfect (you can read it back, if you
can steal the chip or card.)  The mkinitrd already allows ip=rom or
somesuch, so maybe the TFTP kernel can grab a key that way.
> 
> -- 
> Jason A. Pattie
> [EMAIL PROTECTED]
> 
> 
> 
> _____________________________________________________________________
> Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
>       https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
> For additional LTSP help,   try #ltsp channel on irc.openprojects.net
-- 
Berend De Schouwer


_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.openprojects.net

Reply via email to