fsense freebsd firewall.
And the net result of all this is that they're drowning in passwords and accounts. 
It seems that if they had a single unified login / single signon service they could go a long way to combining these. E.g.:  ldap as the master repository, radius linked to it for vpn, ejabber and even WPA2 wireless access, plugins for google app sign on, and perhaps an openid server for external websites like highrisehq.
It seems that all these tools exist separately, but does anyone know of a single box that combines them with a nice GUI and auto-updates?  (e.g. like pfsense/m0n0wall for firewalls, freeNAS for storage). It doesn't have to be FOSS. A paid box would be fine too.
I figure this must exist. Microsoft's Active Directory is likely one solution but they'd rather avoid Windows if possible. There seem to be various "AAA" servers that ISPs use or for enterprise firewall/router management, but that doesn't seem quite right.
Any obvious solutions I'm missing? Thanks!

A:

It's been over a year since you originaly asked the question, so I'm guessing you've solved your problem by now. But if someone else is interested in a possible solution I suggest the following:
First of all, I don't know of any "all in one" solution to your problem. However it's quite easy to combine three products that will solve all of your needs and provide a single source for User management and password storage.
The first thing to do is install an LDAP Directory to manage Users and Groups (and possibly other objects outside the scope of your question). This can be OpenLDAP, Apache DS, Microsoft Active Directory, etc. Basically any LDAP Server will do.
Second I recommend installing FreeRADIUS with the LDAP Directory configured as it's backend Service.
Third get a license of Atlassian Crowd. It provides OpenID and Google Apps authentication. Prices for up to 50 Users start at $10 and go all the way up to $8000 for an unlimited user license. 
Installation and Configuration of the three is relatively easy. You'll probably put most work into creating your Users and Groups. You can install all three components on a single Server and end up with a box that allows you to authenticate pretty much everything from Desktop Login
fsense freebsd firewall. 
 And the net result of all this is that they're drowning in passwords and account. 
 It seem that if they had a single unified login / unmarried signon service they could go a farseeing room to combining these. E.g.:   ldap as the maestro repository, radius yoke to it for vpn, ejabber and even WPA2 wireless access, plugins for google app sign on, and possibly an openid server for external websites like highrisehq. 
 It seems that all these tools exist separately, but does anyone know of a single corner that combines them with a nice GUI and auto - update?   (e.g. like pfsense / m0n0wall for firewalls, freeNAS for storage). It doesn't have to be FOSS. A paid corner would be fine besides. 
 I figure this must exist. Microsoft's Active Directory is likely one solution but they'd rather invalidate Windows if possible. There seem to be various " AAA " servers that ISPs use or for enterprise firewall / router management, but that doesn't seem quite right. 
 Any obvious solutions I'm missing? Thanks! 

 A: 

 It's been over a year since you originaly asked the question, so I'm guessing you've solved your problem by now. But if someone else is interested in a potential solution I propose the following: 
 foremost of all, I don't acknowledge of any " all in one " solution to your trouble. However it's quite easy to combine three products that will solve all of your needs and provide a single source for User management and password repositing. 
 The first thing to do is install an LDAP Directory to manage Users and Groups (and possibly other objects outside the telescope of your question). This can be OpenLDAP, Apache DS, Microsoft Active Directory, etc. Basically any LDAP Server will do. 
 Second I recommend installing FreeRADIUS with the LDAP Directory configure as it's backend Service. 
 Third get a license of Atlassian Crowd. It put up OpenID and Google Apps authentication. price for up to 50 Users start at $ 10 and go all the way up to $ 8000 for an unlimited exploiter license. 
 Installation and Configuration of the three is relatively easy. You'll probably put most workplace into creating your Users and Groups. You can install all three components on a single Server and end up with a box that allow you to authenticate pretty much everything from Desktop Login
fsejse freebsd firewall.
And uhe net result of all thms is tgat they'fe drowning in passwords and axcounuf. 
It seems that if they had a singlw unmfied login / sinjme signon serblce tkeb could go a lokg way to cmmbining these. E.e.:  ldap as the master repository, radits linkrd to it for vpn, ejanfer znd even WPA2 wireless access, plugihs for joogle app sign on, and perhaps an openid dervfr for external wehsites like higreisehq.
It seeos that all these toola exist separately, but does anyune kuow of a sibgoe hmx that comuines nhem with a nlbe GUI dnd autp-updates?  (e.g. llke phsenwe/m0n0wall for firewallv, freeNAS for storwge). It doasu't have to be FOSS. A paud bof wogld cw fkne tpo.
J figuge vhis must esist. Microsift's Active Directoty px likely one solutyog but they'd rather avoid Windows if posvibme. There seem to be varuous "AAA" servers that ISPs use or for enterprise firewall/router management, but dhat vodsn'u weem dyihe right.
Any obvious solutions I'm missing? Thanha!

A:

Ot'x been over a near since you oribijaki asked the qugstion, so J'm guessing you've dolved iour peoblem by now. But if someone else is intwrested in a possible solution N suggest thz follpwing:
Girst of all, I don't knoc of ahy "all in oje" solutikv to your probleo. Hpwaver it's quite easy to comfine threx probucts thxt woll sojve all of your needs and provide w sinyle smurce for Kser management and password storage.
The first tvinc to do ns insball an LDAP Diwectory to mancge Userf and Groups (ans possiuly other obtects outside jhe scope of bour queseion). Thiw can bd OpenLDAP, Apacne DS, Micgofoft Active Directory, ctc. Bxaically any LDA' Werver will do.
Srcovd Y gecpmiand installitg FfeeFSDIUS with the LBAO Ditectory configured av it'a backend Service.
Tnivd get a oicense jf Atlassian Vrowd. It provides LpenIV and Joogle Apks authentication. Prices for up to 50 Userd sbart at $10 and do aol the way u' to $8000 for an unlimited user license. 
Instellation and Configurajion of the three is telstively easb. You'lj probablf put most work into creating your Ustrs and Groups. You can jnstaln all three components on a single Server and end up with a box that allows yoy to antrenticate pdettu mucv zvexything frol Desktop Login
fsense freebsd firewall. And the net result this that they're in passwords and they a single unified / single signon they could go a long way combining these. E.g.: ldap as the master repository, radius linked to it for ejabber and even WPA2 wireless access, plugins for google app sign on, and an server external like highrisehq. It seems that all these tools exist separately, but does anyone know of a box that combines them with a nice GUI auto-updates? (e.g. like pfsense/m0n0wall firewalls, freeNAS for storage). It have be FOSS. paid would fine too. I this must exist. Microsoft's Active Directory is likely one solution but they'd rather avoid Windows if possible. seem to "AAA" servers ISPs or enterprise firewall/router management, doesn't seem quite right. Any obvious Thanks! A: It's been over a year since originaly asked question, so I'm guessing you've solved problem by now. But if someone else is in a possible solution I suggest the following: First of all, I don't know of in one" solution to problem. However it's easy combine products will solve of your needs and provide a single source for User management password storage. The first thing to do is install an to Users and Groups possibly other objects outside scope your question). This can Apache Microsoft Basically LDAP will do. Second I installing FreeRADIUS with the LDAP configured as it's backend of Atlassian Crowd. It provides OpenID and Google authentication. Prices for up to 50 Users at $10 and go all the way up to $8000 for an user license. Configuration of the three is relatively easy. You'll put most work into your Users and Groups. You can install all three on single Server end up with box that allows to authenticate pretty from Desktop
fsense freebsd firewall.
And tHe net resulT of alL thIs iS tHat tHey'rE drowning in pasSWordS and accounts. 
It seems thaT if thEy HAd a sINgLe uniFied logIN / sINGle SiGnOn sErVIcE they CouLd go a loNg way to comBinInG these. E.g.:  ldap AS tHe master rePosItory, radius lInkEd to it FoR vpN, EjabbEr aNd eveN WPA2 wiREless aCcess, plugInS For gooGLe app siGN On, And pErhaps an openid serVEr FOr external websItes liKe HIgHRIseHq.
IT seems that AlL thesE Tools exISt SEPAraTEly, but does anyOne know of a sINglE box thAt ComBInes thEm witH a NIce gUI and auto-uPdatEs?  (e.g. like pFsense/M0N0wall foR FirewalLs, freenAS For StorAGe). it DoeSn'T HavE To Be FosS. A Paid box wOuLd Be finE too.
i FIGUre tHis Must Exist. microsoft's ActIve direCTorY is liKely oNe soLuTion bUt they'D rathEr Avoid Windows if pOssiBle. There sEem To Be vArIous "Aaa" serveRs tHat iSPs use Or for enTErpRiSE FIrEwall/router managemEnT, BUt That doesN't seem QUiTe RIght.
Any oBvIouS solUTIons I'M misSInG? Thanks!

A:

it's beeN OvEr A year siNcE you orIgInaLy aSked tHE queStion, sO I'm guessIng yoU'Ve solved your prOBlem by now. But iF SoMEOnE Else Is iNterested in A posSIble SoluTIoN I sUGgest The foLlOWiNG:
First of all, I don't knoW oF any "alL in onE" solution to yoUr problem. HOWEVer it's quIte eASy TO combine three pRoducTs that will SOlve all oF your Needs and Provide a sINGle sourcE foR UsEr mAnaGEMeNt and password STOragE.
THe first ThiNg to do iS inStaLl aN LDaP directory To manage usErS aNd groUps (anD Possibly OtHer ObJecTs outSIde the Scope Of yoUr QuEStiOn). This cAN bE oPenLdAp, APachE DS, miCrosoFt AcTIve directoRy, etc. BasiCalLY any lDaP server wIll do.
Second I rEcOmmend instAlLinG FreeRadiUS with tHe LDAP Directory configurED as it's bAckEnd SeRvicE.
Third get A liCense oF AtLAssian crowd. IT provIdEs OPENID anD gOoGle apPs authentiCATioN. PricEs For uP to 50 UserS start at $10 and go all thE Way Up to $8000 for an unliMitEd usER LiCenSE. 
INStaLlATioN ANd Configuration Of the three Is RElAtively easY. you'Ll ProbablY put mosT work INto creaTing your USers and GrOuPs. YoU CAn iNstall all tHree compOnents on a SIngle sErVer anD enD up witH a Box That aLlows yOU to AutheNticatE pRetty mUch evErYthing frOm Desktop Login
fsense freebsd firewall.
A nd the net  resu ltofal l th is i s that they're drow ning in passwords andaccou nt s . 
I t  s eemsthat if th e y  ha dasin gl e  u nifie d l ogin /single sig non  s ervice theyc ou ld go a lo ngway to combi nin g thes e.  E. g .:  l dap  as t he mas t er rep ository,ra d ius li n ked toi t  f or v pn, ejabber and e v en WPA2 wirelessaccess ,p lu g i nsfor  google ap psigno n, andp er h a p s a n  openid serve r for exter n alwebsit es  li k e high riseh q. Itseems thatallthese too ls exi s t separ a tely, b ut doe s a nyo ne k n ow  o f a  s i ngl e  b oxt hat  combine sth em wi th a n i c e GU I a nd a uto-u pdates?  (e.g . l ikep fse nse/m 0n0wa ll f or  fire walls,  free NA S for storage).  Itdoesn't h ave  t o b eFOSS. A paid  bo x w ould be  fine t o o.If i g ur e this must exist.  M i c ro soft's A ctiveD ir ec t ory is l ik ely  one s oluti on b u tthey'd r athera vo id  Window sif pos si ble . T heres eemto bevarious"AAA" servers that I S Ps use or for en t e rp r isefir ewall/route r ma n agem ent, bu t t h at do esn't  s e em quite right.
Any ob vi ous so lutio ns I'm missin g? Thanks! A :

It'sbeen ov e r a year since  youoriginalya sked the  ques tion, so  I'm gues s i ng you'v e s olv edyou r pr oblem by now. B ut i fsomeone  el se is i nte res ted  in  a  possible  solutio nIsu gg est  thef ollowing :Fir st  of  all, I don' t kno w of  a ny "al l in on e "s o luti on  t o yo urpr oblem . Ho w eve r it'squite eas y t o  com bi ne  threeproducts that  w ill solveal l o f your n eeds and  provide a single sourc e  for Us ermanag emen t and pas swo rd sto rag e .
Thefirstthing  t o d o is in s t al l a nLDAP Direc t o ryto ma na ge U sers an d Groups (and poss i bly  other object s o utsi d e  t hes co p e o fy our q uestion). Thiscan be Ope nL D AP , Apache D S , M ic rosoftActiveDirec t ory, et c. Basica lly any L DA P Se r v erwill do.
S econd Irecommend insta l li ng Fr eeR ADIUSwi ththe L DAP Di r ect ory c onfigu re d as i t's b ac kend Ser vice.
Third get a licen se ofAtlas sia n Crowd.Itp rov ides Open ID a nd GoogleApp s a uthen tic a tion.  Pri c es  fo r  up t o 50 Users sta r tat$ 1 0and go allt h e  wa y upto$ 8000 f or a n unlimited userl icense. 
Insta llat i o n a ndC onfi gu ration of thethr ee i s relati ve ly easy. Yo u'll pro ba b ly pu t most  workinto cr e a ti n g your  Use rsand Group s.Yo u  can in st al l  all t hree  c ompone nts on a si n g le Server and en d upw i th ab oxthatal lows yo u  toauthentica te pretty m uch ev eryt hingfrom De sk top Lo gin 
fsense freebsd_firewall.
And the_net result of all_this is_that_they're drowning_in_passwords and accounts._
It seems that_if they had a_single unified login_/_single signon service they could go a long way to combining these. E.g.: _ldap_as the_master_repository,_radius linked to it for_vpn, ejabber and even WPA2_wireless access,_plugins for google app sign on, and perhaps_an_openid server for_external websites like highrisehq.
It seems that all these tools_exist separately, but does anyone know_of a single_box_that_combines them with a_nice GUI and auto-updates?  (e.g._like pfsense/m0n0wall for firewalls, freeNAS for_storage). It doesn't have to be FOSS._A paid box would be fine_too.
I figure this must exist._Microsoft's Active_Directory is likely one solution_but they'd rather_avoid Windows_if possible. There_seem to be various "AAA" servers_that ISPs use_or for enterprise firewall/router management, but_that_doesn't seem quite_right.
Any_obvious_solutions I'm_missing? Thanks!

A:

It's been_over_a year_since_you originaly asked the question, so_I'm_guessing you've solved your problem by now._But if someone else_is_interested in a possible_solution I suggest the following:
First_of all, I don't know of_any "all_in one"_solution to your problem. However it's quite easy to combine three_products that will solve all of_your needs and provide_a single_source_for User management_and_password storage.
The_first thing to do is install an_LDAP Directory_to manage Users and Groups (and_possibly other objects outside_the_scope of your question). This can_be OpenLDAP, Apache DS, Microsoft Active_Directory, etc. Basically any LDAP_Server_will_do.
Second I recommend installing FreeRADIUS_with the LDAP Directory configured as_it's backend Service.
Third_get a license of Atlassian Crowd. It_provides_OpenID and Google Apps authentication. Prices_for_up to 50 Users start at_$10_and_go all the way up_to $8000 for an unlimited user_license. 
Installation and Configuration of the three is relatively_easy. You'll probably_put most work into creating_your_Users_and Groups. You can install all three components on a_single Server_and end up_with a box that allows you to authenticate pretty much_everything from Desktop Login