Software Index
Linux Software Security Tools  

MUNGE Uid 'N' Gid Emporium

download download home home   report broken
important software information
company name:
Chris Dunlap
license: Freeware
minimum requirements: No special requirements.
functional limitations:
MUNGE Uid 'N' Gid Emporium description
MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment.

It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key.

Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.

Rationale

The need for MUNGE arose out of the HPC cluster environment. Consider the scenario in which a local daemon running on a login node receives a client request and forwards it on to remote daemons running on compute nodes within the cluster. Since the user has already logged on to the login node, the local daemon just needs a reliable means of ascertaining the UID and GID of the client process. Furthermore, the remote daemons need a mechanism to ensure the forwarded authentication data has not been subsequently altered.

A common solution to this problem is to use Unix domain sockets to determine the identity of the local client, and then forward this information on to remote hosts via trusted rsh connections. But this presents several new problems. First, there is no portable API for determining the identity of a client over a Unix domain socket. Second, rsh connections must originate from a reserved port; the limited number of reserved ports available on a given host directly limits scalability. Third, root privileges are required in order to bind to a reserved port. Finally, the remote daemons have no means of determining whether the client identity is authentic.

Overview

A process creates a credential by requesting one from the local MUNGE service. The encoded credential contains the UID and GID of the originating process. This process sends the credential to another process within the security realm as a mean. .
Similar software
Arri (Popularity: ) : Arri is an array API - more commonly known as a buffer API. Arri provides an interface to create, write, copy, duplicate, delete, append and free awways.

It does more than that, though. Arri contains a string API, to handle character ...

pam_login (Popularity: ) : pam_login is written specificly for PAM authentication.

This login version is based on the sources from util-linux 2.9s. I have removed all non PAM stuff and added a lot of nice features from the shadow login program. This means, pam_login will ...

Patra (Popularity: ) : Patra is a Java password tracker.

Password Tracker is an application to keep your passwords in an encrypted file on disk, protected by a pass phrase so that they are safe.

Even if the file containing your passwords falls in the wrong ...

passwdqc (Popularity: ) : pam_passwdqc is a simple password strength checking module for PAM-aware password changing programs, such as passwd.

In addition to checking regular passwords, it offers support for passphrases and can provide randomly generated ones. All features are optional and can be (re-)configured ...

ssss (Popularity: ) : ssss project is an implementation of Shamir's secret sharing scheme for UNIX systems.

In cryptography, a secret sharing scheme is a method for distributing a secret amongst a group of participants, each of which is allocated a share of the secret. ...

gpgwrap (Popularity: ) : gpgwrap project is a wrapper for gpg and its --passphrase-fd option.

SYNOPSIS

gpgwrap -V

gpgwrap -P [-v] [-i] [-a] [-p ]

gpgwrap -F [-v] [-i] [-a] [-c] [-p ] [-o ] [--] [ ... ]

gpgwrap [-v] [-i] [-a] [-p ] [-o ] [--] gpg ...

Md4sum (Popularity: ) : Md4sum generates or checks MD4 checksums applying the algorithm specified in RFC 1320. The project role is to generate and print checksums for all files passed as arguments.. .
md5sha1sum (Popularity: ) : md5sha1sum project provides md5sum, sha1sum, and ripemd160sum. They are intended to be drop in replacements for the tools from GNU textutils.

Since installing textutils is somewhat excessive for just those two utilities, these are meant to be the more compact and ...

User reviews

Write a review:
1 2 3 4 5 6 7 8 9 10
1=poor 10=excellent
Write review*
Your name*
Email*
  (Comments are moderated, and will not appear on this site until the editor has approved them)
 
Similar scripts
pbrowse (Popularity: ) : pbrowse is a file manager written in PHP that provides simple and easy way for managing your files via a www browser. Features: - change filenames, download, move, delete and upload files - add, delete and change folders - compress(bz2, ...
Group a list into sequential n-tuples (Popularity: ) : Group a list into sequential n-tuples function returns a list of n-tuples from a single "flat" list.
N Queen Solutions (Popularity: ) : N Queen Solutions code is the graphical animation of the N-Queen Problem. The problem is to find all ways of placing n non-taking queens on a n by n board.A queen attacks all cells in its same row, column, and ...
Building an N-Tier Application in .NET (Popularity: ) : The online tutorial starts by briefing the types of n-tier applications. The main theme of this article deals with the method of generating dataset which forms a web service to return data. From a Windows application the users could use ...
Bullet Proof Soft's Audio CD Rip N' Burn (Popularity: ) : Bullet Proof Soft's Audio CD Rip N' Burn is a simple audio grabbing software with which you would be able to create customized audio CD's. The 'direct conversion' with fast encoding engine available in the tool enable you to save ...
Click N Link Tracker (Popularity: ) : Click N Tracker is a simple PHP script.It is a useful web software which helps you to manage time as webmaster or E-Zine publisher.It's usage is very simple and installation and setup too.It has the capability to say you which ...
Click -n- Print Coupons (Popularity: ) : Click -n- Print Coupons is a dynamic database driven real-estate web site application. It allows websites to manage and publish their own coupon ad program from any web browser.
Click N' Print Coupons (Popularity: ) : Click -N- Print Coupons, is an easy to install web content management solution used for showcasing coupon listings. Whether you are building or operate a website and looking to ad value to your site, Click -N- Print Coupons allows non-technical ...
Click-n-promote Mailing List Manager (Popularity: ) : Click-n-promote Mailing List Manager is multi-platform compatible. Remotely hosted mail list manager, autoresponder, ad tracker with many more features. 30 day free trial. Affiliate program pays 3x10 forced matrix.
Count N' Log (Popularity: ) : Count N' Log is a Unix compatible script that is written in PERL (CGI) and requires Server Side Includes (SSI) in order to run properly. Also, this script keeps count and track of all the people who vist your page. ...
Rate me
supported os's
stats
downloads 6
version 0.5.8
size in Kb 471
popularity   
892/1272475
user rating 5/10
our rating 0 Stars
share info
Recommend MUNGE Uid 'N' Gid Emporium
Report spyware
New Software
Popular Software
Latest Reviews