[Freeipa-users] Give laptops bidirectional anywhere access to freeipa and /home/

[Simo Sorce]

On Wed, 12 May 2010 12:24:00 -0500
Rob Townley <rob.townley at gmail.com> wrote:

> The main difference between tinc vpns and traditional vpns is that
> tinc is bidirectional and does not require the user to enter a
> username password.  So if the computer is turned on, the remote
> machine is reachable by the IT department.  If it is a windows
> machine, you may want to verify antivirus signatures are up-to-date.
> FusionInventory could be used to push software.
> 
> Yes, it is a machine level as opposed to user level vpn.  tinc would
> have to run all machines to make it the easiest to use.  With freeipa,
> that could be easy.
> 
> The keys currently are RSA public / private keypairs.
> 
> Does not have existing code to work with ldap / kerberos as far as i
> know.

Looks interesting, do you know what's the difference between tinc and
something like openvpn ? Is it just the fact that tinc allows inbound
connections, or is there more ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York