Patrick Dohman <[email protected]> wrote: > Predrag > > I???m new to the list but i???d thought chirp in. > > What clients are people accessing your intranet with? > > I???ve been presented with a similar request & am currently testing mobile > access via ssh & port forwarding utilizing a combination of keys & the match > directive. > > Essentially SSH forwards port 80 after authenticating with a key. The server > is also configured with a match directive to require key based authentication > from all public IP???s. > > This approach seems to work however it may be difficult for some end users. > In addition It also allows shell access. Ideally port forwarding access only > would be preferred. > > Regards > Patrick >
Hi Patrick, You are bringing a very good point. People do access my Intranet from desktop computers (Windows, OS X, Linux) but I see more and more traffic from smart phones and tablets. Current Intranet which needs to be redone uses built in authentication. This is the platform http://www.daisycms.org/daisy/index.html I would like to migrate to something simpler which uses only flat files but has certain advanced features. Hance my question about Foswiki (I run few PmWiki sites). I tested our L2PT/IPsec gateway with Windows 7 built in client and worked like a charm. The web app I exposed is meant to be used by remote crews which sit in front of workstations so I was not thinking much about hand held devices. I think that L2PT/IPsec should work with Android client. I think Authpf will allow you to accomplish your goal without giving people shell access. The way I read it all accounts are member of authpf group which can do only one thing, upload new firewall rules (redirection rules) after successful login. Thanks for you input! Predrag > > > On May 10, 2015, at 10:25 AM, Predrag Punosevac <[email protected]> > > wrote: > > > > Predrag Punosevac
