| Rodney -> RE: differences between free and commercial packages (Aug. 22, '06, 1:53:17 PM) |
The base authentication does remain the same (authenticating with the user
database, e.g. AD). But there are additional control and monitoring mechanisms
added as well. These controls work in an ACL-like manner to accept or deny
users based on which access they are requesting (ssh or sftp), where they are
accessing from (location), a chroot jail selection, live tracing alerts, etc.
There is also a lot more logging to follow who does what, when and with what
(this is important for a number of recent US laws for corporations). This is
all done on a per user basis (fine granularity). The base authentication is
still looked at first -- it is not by-passed.
The shell being stored in the comments field is a decision made back about
9 years ago with Interix when it was at Softway (and called OpenNT then). None
of the NT admin stuff used the field. This continues to be used if set, but
the configuration file can be used to set this for the initial login
on a per user basis instead. |
|
|
|