Wednesday, October 3, 2007

OpenID, PAM and Apache

I was driving home tonight and my mind was wandering. I was thinking about using OpenID as a PAM auth module. I'm sure there are issues with using this, but it's an interesting idea. I found this and this. These articles are both from 2006, so I'm guessing the idea is dead or impossible. It's too bad, because I was thinking that OpenID would be awesome for file system permissions and network file systems, like NFS.

I did find mod_auth_openid, which is a neat idea. If I had an itch for it, I would think you'd want to add the ability to have some sort of dynamic list of authorized hosts. For example, if you had a forum site, you would have them 'register' their personality and add it to the list if valid id's. This would allow you to keep the list of authorized id sources open, while not completely opening your site.

No comments: