On Wed, Dec 16, 2009 at 12:05, rupert THURNER <[email protected]> wrote:
> On Wed, Dec 16, 2009 at 11:49, Dagobert Michelsen <[email protected]> wrote: > >> Hi Rupert, >> >> Am 16.12.2009 um 08:45 schrieb rupert THURNER: >> >>> On Tue, Dec 15, 2009 at 18:24, Ben Walton <[email protected]> wrote: >>> Excerpts from rupert THURNER's message of Tue Dec 15 11:51:50 -0500 2009: >>> > from work? no, nothing but http/s. but i will ask them if i get an >>> exception >>> > for ssh to opencsw. >>> >>> the firewall policies allow certain things, and forbid others, besides >>> the technical restrictions in place. either there is a technically clean >>> possibility in line with the rules (like Sun SGD), or i have to go through >>> the paper process for getting a permission for "ssh login.opencsw". >>> >>> but i do not want to break their rules even if technically possible (e.g. >>> pierce the firewall by tunneling ssh through 443). if i do not like the >>> rules any more it is time to look for another job i guess :) >>> >> >> Fortunately setting up SGD is quite easy. If you want you can try >> logging in with accessing >> https://login.opencsw.org >> (http is redirected). As it is not an official certificate you must >> accept the root cert and add it to your keystore once. >> >> > uuh .. that reminds me that we have another restriction in place: there is > a list of trusted ca's. we use a software called "webwasher" which breaks up > https connections at the firewall - and blocks everything which is not on > this list. > > but, we convinced the security people to accept http://cacert.org/ certs > to have a free alternative as well - besides the usual suspects thawte, etc. > > > i tested it from home and it seems to work great. the following i was wondering: * where to change the password * where to change the terminal type rupert.
_______________________________________________ maintainers mailing list [email protected] https://lists.opencsw.org/mailman/listinfo/maintainers
