Re: openssh + krb5 (followup)

2000-03-22 Thread Kris Kennaway
On Wed, 22 Mar 2000, Sheldon Hearn wrote: > > Interoperability with MIT krb5 still seems to be an issue. > > Bleh, more FUD. The problem is in operability with non-FreeBSD openssh! > We use supported_authentication values for KRB5 that neither Datafellows > SSH nor OpenBSD SSH use. :-( Hmm..I

Re: swap

2000-03-18 Thread Kris Kennaway
On Sun, 19 Mar 2000, Micke wrote: > enable the swap file in /etc/rc.conf > > swapfile="/usr/swap0" # Set to name of swapfile if aux swapfile desired. Did you reboot? Kris In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe <[EMAIL PROTECT

Re: 5.0 features?

2000-03-13 Thread Kris Kennaway
On Sun, 12 Mar 2000, Ted Sikora wrote: > What kind of features and additions can we expect from the merged > systems in 5.0? It looks as though this has been in > the works for sometime. I think I read somewhere that SMP support would > be much improved? Since no-one else seems to have replied

Re: Getting CPU usage in FreeBSD

2000-03-11 Thread Kris Kennaway
On Sun, 12 Mar 2000, Pedro A M Vazquez wrote: > > We probably should make this into a sysctl to divorce the binaries from > > having to read kvm. > > it's already there: > > vm.loadavg: { 1.40 1.33 1.23 } Thats the system load average. The question referred to CPU usage percentages. Kri

Re: Getting CPU usage in FreeBSD

2000-03-11 Thread Kris Kennaway
On Sun, 12 Mar 2000, Oliver Fromme wrote: > Then look up the definition of kread() in the same file, and > how the contents of cur.cp_time are used in the cpustats() > function. Note that "cur" is a "struct statinfo", which is > defined in /usr/include/devstat.h. The CPU states are defined > in

Re: inner workings of the C compiler

2000-03-09 Thread Kris Kennaway
On Wed, 8 Mar 2000, Alfred Perlstein wrote: > I'm pretty sure this can be done a hell of a lot easier by using shared > libraries and using the enviornment variables LD_LIBRARY_PATH and > LD_PRELOAD, see the rtld manpage for more help. Yes, I've done this when trying to track down buffer overflo

Re: DeCSS

2000-03-03 Thread Kris Kennaway
On Sat, 4 Mar 2000, Sheldon Hearn wrote: > > http://www.totse.com/DeCSS/ > > Screw the cascading style sheets business, I wanna distribute the real > thing. I'd like to see these wankers try to sue me. Especially if it > means a free plane trip to the States. :-) You know, I half want to add

Re: d: /kernel: malformed input file (not rel or archive) ??

2000-03-01 Thread Kris Kennaway
On Wed, 1 Mar 2000, Johan Kruger wrote: > If i try to load the example in > /usr/src/share/exaples/lkm/misc/module/misc_mod.o i get the following. > Pleeaaas help ? LKMs are deprecated in favour of KLDs. Do you have options LKM in your kernel if you really wnt to play with the old technology

RE: DeCSS

2000-02-21 Thread Kris Kennaway
On Mon, 21 Feb 2000, Thomas Uhrfelt wrote: > It's a wonderful idea! I would gladly install the port just for the sake of > the cause. cd /usr/ports/www/decss && make install clean && enjoy :-) Kris "How many roads must a man walk down, before you call him a man?" "Eight!" "That was a rhet

Re: My daughter bought Digital Research USB Card

2000-02-21 Thread Kris Kennaway
On Sun, 20 Feb 2000, Beverly H Barnhart wrote: > The book said she could get the driver off of Windows 98 CD or > www.microsoft.com but I could not get the driver from any of those > places any ideas? Which version of FreeBSD is she using? Kris > Bev "How many roads must a man walk down,

Re: DeCSS

2000-02-21 Thread Kris Kennaway
On Mon, 21 Feb 2000, Peter Wemm wrote: > I would love to make a port of this, for reasons that become obvious once you > see the page. (Think of all the mailing list archives and mirrors) > > http://www.totse.com/DeCSS/ > > Be sure to read it before commenting, it's not what you might think.

Re: Y2K: groff in the tree out of date

2000-02-16 Thread Kris Kennaway
On Wed, 16 Feb 2000, Ted Faber wrote: > >> The groff in 3.4-stable is out of date. > > > >Be sure to catch 4.0-RELEASE. :-) > > I was planning on it. Just so I understand, 3.x will not have it's > groff updated? I think it would be premature to say that. Your best bet is to ask the person who

Re: bonnie still trustable?

2000-02-14 Thread Kris Kennaway
On Tue, 15 Feb 2000, Greg Lehey wrote: > > http://www.simon-shapiro.org/st_d/index.html > I don't see anything that jumps out and tells me where to get this > software, nor where I can get a printable version of the > documentation. Shimon, can you help? The above URL links to the documentatio

Re: accounting, ppp

2000-02-14 Thread Kris Kennaway
On Sat, 12 Feb 2000, Egervary Gergely wrote: > I'm running a PPP dialup server. (mgetty-autoppp) Is there any way to do > login accounting (like solaris' PAM modules, or linux pam_limits.so) A FreeBSD PAM module? ;) We use the same PAM code as linux, so grab the source of the module you use und

Re: disappearing mount points after install

2000-01-23 Thread Kris Kennaway
On Sun, 23 Jan 2000, Wes Peters wrote: > OK, let's quickly hack the VM system to allow swapping on a DOS partition. dd if=/dev/zero of=/c/swap vnconfig -c -e /dev/vn0 /c/swap swap Kris "How many roads must a man walk down, before you call him a man?" "Eight!" "That was a rhetorical questi

Re: Better fixit (was: Why was rsh removed from the fixit floppy?)

2000-01-23 Thread Kris Kennaway
On Mon, 24 Jan 2000, Peter Jeremy wrote: > On Fri, 21 Jan 2000 18:01:34 +0530, Greg Lehey <[EMAIL PROTECTED]> wrote: > >If you want a better fixit floppy, you should consider the new custom > >disk pair with PicoBSD ... There's still space on there; what > >else could we put there? > > ssh or O

Re: Encryption rules changes coming up - win for open source

2000-01-12 Thread Kris Kennaway
On Thu, 13 Jan 2000, Oliver Fromme wrote: > But then, at the end: > >People posting ``open source'' programs would be required >to send the code, or a Web site address where the code was >displayed, to the government. > > Basically, does this mean something like > tar cf - /usr/src/

Re: i82802 Random Number Generator Patch

2000-01-08 Thread Kris Kennaway
On Sat, 8 Jan 2000, Bjorn wrote: > Anyway, I've writting a small patch to enable the thermal noise random > number generator found in the i82802 (i82810). > > It breaks the /dev/random semantics slightly as the bitpool never run > out of fresh bits. Not really - /dev/random is just not guarante

Re: GLIDE for FreeBSD

1999-12-26 Thread Kris Kennaway
On Fri, 24 Dec 1999, Theo van Klaveren wrote: > > Will grab new tarball shortly... (at least you know someone's testing it). > > He he... To me, that's worth a hundred bug reports :) You should submit this stuff as a port - it's not hard, and this will ensure that it gets mainstream testing/use

Re: DES routines?

1999-12-25 Thread Kris Kennaway
On Thu, 23 Dec 1999, Ptacek wrote: > Thanks for the info, by the way I found the ecb_crypt by doing a man > des_crypt. Are you sure this was on a FreeBSD box? I can't see ecb_crypt listed in our des_crypt(3) manpage, though it is on e.g. Solaris. Kris To Unsubscribe: send mail to [EMAIL PROT

Re: DES routines?

1999-12-23 Thread Kris Kennaway
On Sun, 19 Dec 1999, Ptacek wrote: > I am looking for some routines to perform DES encryption in electronic code > book mode. I assume you have some reason for wanting ECB, and not the usual (more secure) CBC mode.. > I have found the ecb_cyrpt function, however when I try and use it the > buff

Re: Shrinking the BSD kernel

1999-12-23 Thread Kris Kennaway
On Thu, 23 Dec 1999, Stefan Parvu wrote: > Does anybody know real procedures, steps whatever to keep a small an > efficient kernel ? Don't include the stuff you don't need. This belongs on questions-, not hackers- Kris To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-

Re: Crypto in the kernel: where & how?

1999-12-10 Thread Kris Kennaway
On Fri, 10 Dec 1999, Dan Moschuk wrote: > | our users (by geography) from accessing it. However at least in the case > | of OpenSSL (which I'm planning to import into internat when I go home to > | australia next week :-) the two will have to be divergent due to the > | patent restrictions on RSA

Re: Crypto in the kernel: where & how?

1999-12-09 Thread Kris Kennaway
On Thu, 9 Dec 1999, Archie Cobbs wrote: > It would be nice if we had a /usr/src/sys/crypt directory, plus whatever > export-controlled firewalling silliness is necessary. It'd presumably have to be /usr/src/secure/sys to fit with our existing distribution infrastructure. > - Add /usr/src/sys/

Re: PCI DMA lockups in 3.2 (3.3 maybe?)

1999-12-04 Thread Kris Kennaway
On Sat, 4 Dec 1999, Matthew Dillon wrote: > The later responses, mainly by existing FreeBSD people, was to > essentially roast him over the coals. By the third message the thread > turned into an emotional mush, and *NONE* of it was Dennis's doing. Since I'm one of the existing Fr

Re: Human readable df

1999-11-29 Thread Kris Kennaway
On Mon, 29 Nov 1999 [EMAIL PROTECTED] wrote: > Not sure if -hackers is the place for this, but here goes. > > Here's a patch to add -h flag to df to produce human readable > output. This makes it easier to read if the disk is big. You should submit this as a PR so it doesn't fall through the cr

Re: Test code...

1999-11-28 Thread Kris Kennaway
On Sat, 27 Nov 1999, Brian J. McGovern wrote: > Anyone have any suggestions (or feel like writing) code to exercise the > following subsystems? > > - Virtual Memory > > - The threads library > > - mmap() and friends > > We want to try to bang on them a little more for 3.4 th

RE: PCI DMA lockups in 3.2 (3.3 maybe?)

1999-11-21 Thread Kris Kennaway
On Sun, 21 Nov 1999, Christopher Stein wrote: > > > Dennis has a good point. > > > > Dennis has no point unless he provides some numbers to quantify his > > claim. > > His point was not a claim about performance, rather he was bringing into > question whether performance was improving with succ

RE: PCI DMA lockups in 3.2 (3.3 maybe?)

1999-11-21 Thread Kris Kennaway
On Sun, 21 Nov 1999, Christopher Stein wrote: > Dennis has a good point. Dennis has no point unless he provides some numbers to quantify his claim. Witness: FreeBSD 3.X is the fastest thing I have ever seen: it's so much faster than 2.X, I can only guess what 4.X is going to be like! There, n

Re: fsck_ext2fs and fsck_msdos from Open/NetBSD

1999-11-11 Thread Kris Kennaway
On Fri, 12 Nov 1999, Alex wrote: > Both Open- and NetBSD seem to have separate fsck programs for each > filesystem type - fsck_ffs, fsck_ext2fs and fsck_msdos - the actual > /sbin/fsck program calling the appropriate one for a given filesystem > (in a way similar to our `mount' command). The las

Re: module names

1999-10-25 Thread Kris Kennaway
This kind of stuff is better suited to the arch mailing list..cross-posting. Kris On Tue, 26 Oct 1999, Pascal Hofstee wrote: > Hi, > > With the recent addition of more and more KLDs to the /modules directory i > was wondering if perhaps it would be a good idea to name these modules > more cons

Re: --enable-haifa

1999-10-13 Thread Kris Kennaway
On Wed, 13 Oct 1999, W Gerald Hicks wrote: > Just curious what effect using the --enable-haifa flag for building > gcc-2.95.1/x86 would have so I did a comparison using the Dhrystone > benchmark from /usr/ports/benchmarks/bytebench. This seems marginal, in other words. How did the results vary w

Re: Search a symbol in the source tree

1999-10-12 Thread Kris Kennaway
On Tue, 12 Oct 1999, bush doctor wrote: > Have you taken a look at global, gtags, or htags. They are part of > the base system. Also 'http://lxr.linux.no/freebsd/source' is rather > helpful ... or the glimpse port. or grep -R, which is recursive grep. Kris XOR for AES -- join the campa

Re: Apple's planned appoach to permissions on movable filesystems

1999-10-07 Thread Kris Kennaway
Here's a passing thought I had which may be relevant. Make uids randomly assigned. This solves the problem of collision between uids on an introduced medium and the ones on the local system by making it statistical (if the uid space is large enough). In order to manage this among multiple machine

RE: updating packages automatically, etc.pp.

1999-09-30 Thread Kris Kennaway
On Thu, 30 Sep 1999, Robert Huff wrote: > > > The script relies on you having an up-to-date INDEX file; do "make > > > index" first to be sure (which reminds me, why is the INDEX file > > > always out of sync after a cvsup?). It only tries to upgrade ports > > > > Because it's only generat

RE: updating packages automatically, etc.pp.

1999-09-29 Thread Kris Kennaway
On Wed, 29 Sep 1999, Conrad Sabatier wrote: > The script relies on you having an up-to-date INDEX file; do "make > index" first to be sure (which reminds me, why is the INDEX file > always out of sync after a cvsup?). It only tries to upgrade ports Because it's only generated periodically, not

Re: A new package fetching utility, pkg_get

1999-09-24 Thread Kris Kennaway
On Fri, 24 Sep 1999, Jaakko Salomaa wrote: > It's designed to be easy to use, so it first checks -s parameter, then > PKGSERVER environment variable, then the machine's toplevel domain. If the > toplevel domain contains only two letters it attemps to use > ftp..freebsd.org, else it defaults to ft

Re: NetWare client in -current

1999-09-10 Thread Kris Kennaway
On Fri, 10 Sep 1999, Matthew N. Dodd wrote: > > Okay. If that's the plan, then I don't have any objections. > > > > I do hate the idea of having to reimplement samba because of the licensing > > though - it already does quite a good job at SMB serving, it seems a waste > > to duplicate the effort

Re: NetWare client in -current

1999-09-10 Thread Kris Kennaway
On Fri, 10 Sep 1999, Matthew N. Dodd wrote: > On Fri, 10 Sep 1999, Kris Kennaway wrote: > > I tend to agree. If we bring in all of this stuff (even though I > > appreciate it's very useful) we should also bring in samba into the > > base tree by symmetry. > > Th

Re: NetWare client in -current

1999-09-10 Thread Kris Kennaway
On Fri, 10 Sep 1999, Matthew N. Dodd wrote: > > Okay. If that's the plan, then I don't have any objections. > > > > I do hate the idea of having to reimplement samba because of the licensing > > though - it already does quite a good job at SMB serving, it seems a waste > > to duplicate the effor

Re: NetWare client in -current

1999-09-10 Thread Kris Kennaway
On Fri, 10 Sep 1999, Matthew N. Dodd wrote: > On Fri, 10 Sep 1999, Kris Kennaway wrote: > > I tend to agree. If we bring in all of this stuff (even though I > > appreciate it's very useful) we should also bring in samba into the > > base tree by symmetry. > > Th

Re: NetWare client in -current

1999-09-10 Thread Kris Kennaway
On Fri, 10 Sep 1999, Ruslan Ermilov wrote: > > Is there any reason to not have it as a port? > > > IMHO, only the basic IPX/SPX functionality should be included into the > source tree. Anything else could be available as ports/net/nw-utils. I tend to agree. If we bring in all of this stuff (eve

Re: NetWare client in -current

1999-09-10 Thread Kris Kennaway
On Fri, 10 Sep 1999, Ruslan Ermilov wrote: > > Is there any reason to not have it as a port? > > > IMHO, only the basic IPX/SPX functionality should be included into the > source tree. Anything else could be available as ports/net/nw-utils. I tend to agree. If we bring in all of this stuff (ev

RE: TCP sequence numbers

1999-09-07 Thread Kris Kennaway
On Thu, 2 Sep 1999, Geoff Rehmet wrote: > > I'd expect Yarrow to be (perhaps quite a bit) slower than our existing > > PRNG - it's a more conservative design and uses primitives > > like SHA-1 (for > > yarrow-160). I don't know how much of an impact this would be for > > network performance. > >

RE: TCP sequence numbers

1999-09-07 Thread Kris Kennaway
On Thu, 2 Sep 1999, Geoff Rehmet wrote: > > How do OpenBSD do it? > > They use arc4random(), to add a random increment. And you do ISN = C + f(state) where C is a 250KHz counter and f is your cut-down MD5? And state = {random secret, src addr, src port, dst addr, dst port, ?} I haven't had time

RE: TCP sequence numbers

1999-09-07 Thread Kris Kennaway
On Thu, 2 Sep 1999, Geoff Rehmet wrote: > > I'd expect Yarrow to be (perhaps quite a bit) slower than our existing > > PRNG - it's a more conservative design and uses primitives > > like SHA-1 (for > > yarrow-160). I don't know how much of an impact this would be for > > network performance. >

RE: TCP sequence numbers

1999-09-07 Thread Kris Kennaway
On Thu, 2 Sep 1999, Geoff Rehmet wrote: > > How do OpenBSD do it? > > They use arc4random(), to add a random increment. And you do ISN = C + f(state) where C is a 250KHz counter and f is your cut-down MD5? And state = {random secret, src addr, src port, dst addr, dst port, ?} I haven't had time

Re: TCP sequence numbers

1999-09-01 Thread Kris Kennaway
On Wed, 1 Sep 1999, Geoff Rehmet wrote: > After a bit of work on TCP sequence numbers, and generating initial > sequence numbers which are difficult to predict, I have put some > code together, which I belive makes the way in which FreeBSD > generates initial send sequence numbers more secure. Ho

Re: TCP sequence numbers

1999-09-01 Thread Kris Kennaway
On Wed, 1 Sep 1999, Geoff Rehmet wrote: > After a bit of work on TCP sequence numbers, and generating initial > sequence numbers which are difficult to predict, I have put some > code together, which I belive makes the way in which FreeBSD > generates initial send sequence numbers more secure. H

Re: [mount.c]: Option "user"-patch

1999-08-29 Thread Kris Kennaway
On Mon, 30 Aug 1999, Alban Hertroys wrote: > I have seen this line a lot lately. It isn't in FreeBSD 3.2-STABLE, is > it? My /usr/src/sbin/mount/mount.c says: > > /* > * If the mount was successfully, and done by root, tell mountd the > * good news. Pid checks are proba

Re: [mount.c]: Option "user"-patch

1999-08-29 Thread Kris Kennaway
On Sun, 29 Aug 1999, Chris Piazza wrote: > # set sysctl variables early as we can > if [ -f /etc/rc.sysctl ]; then > . /etc/rc.sysctl > fi > > Mind you it doesn't look like it was merged into releng_3 Could someone do this before 3.3? It's useful functionality. Kris To Unsubscribe: s

Re: [mount.c]: Option "user"-patch

1999-08-29 Thread Kris Kennaway
On Mon, 30 Aug 1999, Alban Hertroys wrote: > I have seen this line a lot lately. It isn't in FreeBSD 3.2-STABLE, is > it? My /usr/src/sbin/mount/mount.c says: > > /* > * If the mount was successfully, and done by root, tell mountd the > * good news. Pid checks are prob

Re: [mount.c]: Option "user"-patch

1999-08-29 Thread Kris Kennaway
On Sun, 29 Aug 1999, Chris Piazza wrote: > # set sysctl variables early as we can > if [ -f /etc/rc.sysctl ]; then > . /etc/rc.sysctl > fi > > Mind you it doesn't look like it was merged into releng_3 Could someone do this before 3.3? It's useful functionality. Kris To Unsubscribe:

Re: Looking for good QA tests...

1999-08-26 Thread Kris Kennaway
On Thu, 26 Aug 1999, Brian McGovern wrote: > However, I'm now at the point where I'd like to start collecting materials to > do this. By "materials", I mean both test scenarios and code for performing > these tests. I suggest going over all of the various stress-test scripts/code which have been

Re: Looking for good QA tests...

1999-08-26 Thread Kris Kennaway
On Thu, 26 Aug 1999, Brian McGovern wrote: > However, I'm now at the point where I'd like to start collecting materials to > do this. By "materials", I mean both test scenarios and code for performing > these tests. I suggest going over all of the various stress-test scripts/code which have been

Re: Need some advice regarding portable user IDs

1999-08-23 Thread Kris Kennaway
On Wed, 18 Aug 1999, Marc Ramirez wrote: > Oh! I was under the impression that it just didn't work, even with > correct perms, but I use FreeBSD. Lemme try it... Can't mount, even > with 0666 on /dev/fd0. Maybe I'm being stupid. Wouldn't be the first > time! It's controlled by a sysctl in Fre

Re: Need some advice regarding portable user IDs

1999-08-23 Thread Kris Kennaway
On Wed, 18 Aug 1999, Marc Ramirez wrote: > Oh! I was under the impression that it just didn't work, even with > correct perms, but I use FreeBSD. Lemme try it... Can't mount, even > with 0666 on /dev/fd0. Maybe I'm being stupid. Wouldn't be the first > time! It's controlled by a sysctl in Fr

Re: Anybody cobbled together a getpwent() that uses libradius?

1999-08-20 Thread Kris Kennaway
On Fri, 20 Aug 1999, Jaye Mathisen wrote: > While whatever happens with PAM and LDAP, and all those great things, I > would like to validate passwords via Radius... > > It would be most convenient if it was just in getpwent()... This is the wrong place to put it - see the pam_radius module. Bloa

Re: Anybody cobbled together a getpwent() that uses libradius?

1999-08-20 Thread Kris Kennaway
On Fri, 20 Aug 1999, Jaye Mathisen wrote: > While whatever happens with PAM and LDAP, and all those great things, I > would like to validate passwords via Radius... > > It would be most convenient if it was just in getpwent()... This is the wrong place to put it - see the pam_radius module. Blo

Re: Need some advice regarding portable user IDs

1999-08-18 Thread Kris Kennaway
On Wed, 18 Aug 1999, Marc Ramirez wrote: > Oh! I was under the impression that it just didn't work, even with > correct perms, but I use FreeBSD. Lemme try it... Can't mount, even > with 0666 on /dev/fd0. Maybe I'm being stupid. Wouldn't be the first > time! It's controlled by a sysctl in Fre

Re: Need some advice regarding portable user IDs

1999-08-18 Thread Kris Kennaway
On Wed, 18 Aug 1999, Marc Ramirez wrote: > Oh! I was under the impression that it just didn't work, even with > correct perms, but I use FreeBSD. Lemme try it... Can't mount, even > with 0666 on /dev/fd0. Maybe I'm being stupid. Wouldn't be the first > time! It's controlled by a sysctl in Fr

Re: Saving system image to disk (NOT on a laptop)

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Marc Nicholas wrote: > Wasn't there already a project that did this??? The project name escapes > me, but I believe it was linked from the FreeBSD Projects page... Maybe you're thinking of the RIO project (RAM I/O): http://www.eecs.umich.edu/Rio/ Kris To Unsubscribe: send

Re: Kerberos 5 integration.

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Matthew N. Dodd wrote: > > At a guess, it is given your username, obtains the ticket from wherever > > that is stored locally and goes off and verifies it against the server. If > > the server comes back affirmative, it grants you access. > > Which is the problem if you're sa

Re: Kerberos 5 integration.

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Matthew N. Dodd wrote: > I'm still a bit confused about PAM though. While it is possible to do > what kinit does and verify a password, the real reason we like kerberos is > because we don't have to enter passwords; we get a ticket and the server > verifies that the ticket is

Re: Saving system image to disk (NOT on a laptop)

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Marc Nicholas wrote: > Wasn't there already a project that did this??? The project name escapes > me, but I believe it was linked from the FreeBSD Projects page... Maybe you're thinking of the RIO project (RAM I/O): http://www.eecs.umich.edu/Rio/ Kris To Unsubscribe: sen

Re: Kerberos 5 integration.

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Matthew N. Dodd wrote: > > At a guess, it is given your username, obtains the ticket from wherever > > that is stored locally and goes off and verifies it against the server. If > > the server comes back affirmative, it grants you access. > > Which is the problem if you're s

Re: Kerberos 5 integration.

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Matthew N. Dodd wrote: > I'm still a bit confused about PAM though. While it is possible to do > what kinit does and verify a password, the real reason we like kerberos is > because we don't have to enter passwords; we get a ticket and the server > verifies that the ticket i

Re: Kerberos 5 integration.

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Matthew N. Dodd wrote: > I'm pretty sure there is a kerberos5 pam module floating around > somewhere... ftp://ftp.dementia.org/pub/pam/ http://www-personal.engin.umich.edu/~itoi/ Both referenced from http://www.us.kernel.org/pub/linux/libs/pam/modules.html Kris To Unsubs

Re: Kerberos 5 integration.

1999-08-17 Thread Kris Kennaway
On Tue, 17 Aug 1999, Matthew N. Dodd wrote: > I'm pretty sure there is a kerberos5 pam module floating around > somewhere... ftp://ftp.dementia.org/pub/pam/ http://www-personal.engin.umich.edu/~itoi/ Both referenced from http://www.us.kernel.org/pub/linux/libs/pam/modules.html Kris To Unsub

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-16 Thread Kris Kennaway
Sorry for not responding to this earlier, I missed it in my inbox. On Sat, 14 Aug 1999, Nick Sayer wrote: > > Where do you store the keys, or do you generate them dynamically? The > > latter would take time to verify primality. > > If by "keys" you mean the DH generator and such, they are consta

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-16 Thread Kris Kennaway
On Mon, 16 Aug 1999, David Wolfskill wrote: > I'm hardly an "expert" with NIS, but it is actually fairly flexible... > as long as changes imposed are on its own terms. :-) Thanks for the information. I noticed some rumblings on the srp-dev mailing list about developing NIS support - I don't thin

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-16 Thread Kris Kennaway
Sorry for not responding to this earlier, I missed it in my inbox. On Sat, 14 Aug 1999, Nick Sayer wrote: > > Where do you store the keys, or do you generate them dynamically? The > > latter would take time to verify primality. > > If by "keys" you mean the DH generator and such, they are const

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-16 Thread Kris Kennaway
On Mon, 16 Aug 1999, David Wolfskill wrote: > I'm hardly an "expert" with NIS, but it is actually fairly flexible... > as long as changes imposed are on its own terms. :-) Thanks for the information. I noticed some rumblings on the srp-dev mailing list about developing NIS support - I don't thi

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-15 Thread Kris Kennaway
On Sun, 15 Aug 1999, Dave Walton wrote: > > Ideally, things like SRP, SRA, CHAP, PAP, etc, > > should be available as plugins to client/server apps, so we don't have to > > make separate patches to telnet/telnetd, ftp/ftpd, etc, for all of the > > authentication protocols-of-the-day. > > I thoug

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-15 Thread Kris Kennaway
On Sun, 15 Aug 1999, Dave Walton wrote: > > Ideally, things like SRP, SRA, CHAP, PAP, etc, > > should be available as plugins to client/server apps, so we don't have to > > make separate patches to telnet/telnetd, ftp/ftpd, etc, for all of the > > authentication protocols-of-the-day. > > I thou

SRP (Was: Re: Whither makefiles for src/crypto/telnet/* ?)

1999-08-15 Thread Kris Kennaway
On Sun, 15 Aug 1999, Kris Kennaway wrote: > The only issue which (to my knowledge) has never been addressed anywhere > is the authentication protocol exchange between client and server and a > formalized API (PAM doesn't do this: it communicates between a server and > arbitra

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-15 Thread Kris Kennaway
On Sun, 15 Aug 1999, Dave Walton wrote: > > Again, the problem is that there is administrative overhead - a separate > > password database is required. > > Yes, there is /etc/tpasswd to deal with. I guess what I should have > said is that I'd love to see SRP integrated into FreeBSD (as PAM, >

SRP (Was: Re: Whither makefiles for src/crypto/telnet/* ?)

1999-08-15 Thread Kris Kennaway
On Sun, 15 Aug 1999, Kris Kennaway wrote: > The only issue which (to my knowledge) has never been addressed anywhere > is the authentication protocol exchange between client and server and a > formalized API (PAM doesn't do this: it communicates between a server and > arbitra

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-15 Thread Kris Kennaway
On Sun, 15 Aug 1999, Dave Walton wrote: > > Again, the problem is that there is administrative overhead - a separate > > password database is required. > > Yes, there is /etc/tpasswd to deal with. I guess what I should have > said is that I'd love to see SRP integrated into FreeBSD (as PAM,

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Nick Sayer wrote: > > That's not the point, though - if you want to use legacy computer > > platforms, you have to expect to use legacy passwords. > > The point is that you can do so AND have an increase in security of > communications. Is the result perfect? No. Is it better

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Nick Sayer wrote: > > That's not the point, though - if you want to use legacy computer > > platforms, you have to expect to use legacy passwords. > > The point is that you can do so AND have an increase in security of > communications. Is the result perfect? No. Is it bette

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Narvi wrote: > > I got started on this, to the extent of storing the SRP data in the passwd > > file as an additional password crypt() method (using my modified libcrypt > > - see http://www.physics.adelaide.edu.au/~kkennawa/crypt-990725.tar.gz), > > but ran out of time. I hop

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Nick Sayer wrote: > Kris Kennaway wrote: > > > > On Fri, 13 Aug 1999, Dave Walton wrote: > > > > > If you really want to work on an encrypted telnet, check out The > > > Stanford SRP Authentication Project (http://srp.stanford.edu/srp/

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Sheldon Hearn wrote: > On Fri, 13 Aug 1999 23:42:48 MST, "Dave Walton" wrote: > > > If you really want to work on an encrypted telnet, check out The > > Stanford SRP Authentication Project (http://srp.stanford.edu/srp/). > > I'd love to see SRP integrated into the FreeBSD

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Narvi wrote: > > I got started on this, to the extent of storing the SRP data in the passwd > > file as an additional password crypt() method (using my modified libcrypt > > - see http://www.physics.adelaide.edu.au/~kkennawa/crypt-990725.tar.gz), > > but ran out of time. I ho

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Nick Sayer wrote: > Kris Kennaway wrote: > > > > On Fri, 13 Aug 1999, Dave Walton wrote: > > > > > If you really want to work on an encrypted telnet, check out The > > > Stanford SRP Authentication Project (http://srp.stanfo

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Fri, 13 Aug 1999, Dave Walton wrote: > If you really want to work on an encrypted telnet, check out The > Stanford SRP Authentication Project (http://srp.stanford.edu/srp/). > I'd love to see SRP integrated into the FreeBSD telnet/telnetd. I got started on this, to the extent of storing the

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Sat, 14 Aug 1999, Sheldon Hearn wrote: > On Fri, 13 Aug 1999 23:42:48 MST, "Dave Walton" wrote: > > > If you really want to work on an encrypted telnet, check out The > > Stanford SRP Authentication Project (http://srp.stanford.edu/srp/). > > I'd love to see SRP integrated into the FreeBSD

Re: Whither makefiles for src/crypto/telnet/* ?

1999-08-14 Thread Kris Kennaway
On Fri, 13 Aug 1999, Dave Walton wrote: > If you really want to work on an encrypted telnet, check out The > Stanford SRP Authentication Project (http://srp.stanford.edu/srp/). > I'd love to see SRP integrated into the FreeBSD telnet/telnetd. I got started on this, to the extent of storing th

Re: BSD XFS Port & BSD VFS Rewrite

1999-08-13 Thread Kris Kennaway
On Fri, 13 Aug 1999, Jason Thorpe wrote: > > I did, they have a feedback form I filled out yesterday. I mentioned that > > and that if they dual licensed the code, it could be used by the entire > > free software community, not just the hip Linux crowd and also mentioned > > that a great many

Re: BSD XFS Port & BSD VFS Rewrite

1999-08-13 Thread Kris Kennaway
On Fri, 13 Aug 1999, Jason Thorpe wrote: > > I did, they have a feedback form I filled out yesterday. I mentioned that > > and that if they dual licensed the code, it could be used by the entire > > free software community, not just the hip Linux crowd and also mentioned > > that a great man

Re: SRA+IDEA Telnet

1999-08-13 Thread Kris Kennaway
On Fri, 13 Aug 1999, Nick Sayer wrote: > I originally obtained SRA code from a University in Germany. I obtained > my implementation of IDEA from PGP. In fact, I used idea.[ch] and #if > 0'ed > out stuff that's not needed. Couldn't you work the code so it obtains all its' encryption functions fro

Re: SRA+IDEA Telnet

1999-08-13 Thread Kris Kennaway
On Fri, 13 Aug 1999, Nick Sayer wrote: > I originally obtained SRA code from a University in Germany. I obtained > my implementation of IDEA from PGP. In fact, I used idea.[ch] and #if > 0'ed > out stuff that's not needed. Couldn't you work the code so it obtains all its' encryption functions fr

Re: userfs help needed.

1999-07-28 Thread Kris Kennaway
On Wed, 28 Jul 1999, David E. Cross wrote: > I am wading through the portalfs and nullfs source, but I am desperately > lost. I would love to be able to find out who would be willing to help out > with questions. I feel I would be spamming far too many people by just > sending > to -hackers. M

Re: userfs help needed.

1999-07-28 Thread Kris Kennaway
On Wed, 28 Jul 1999, David E. Cross wrote: > I am wading through the portalfs and nullfs source, but I am desperately > lost. I would love to be able to find out who would be willing to help out > with questions. I feel I would be spamming far too many people by just sending > to -hackers. Mig

Re: rndcontrol and SMP

1999-07-24 Thread Kris Kennaway
On Sat, 24 Jul 1999, Mark Murray wrote: > > When you say rewriting, do you mean syncing with the version of the code > > in Linux (1.04, instead of our 0.95) or actually rewriting? If the latter, > > I'm curious as to what your aims are. > > I want to implement Bruce Schneier's Yarrow. Ah - I ha

Re: rndcontrol and SMP

1999-07-24 Thread Kris Kennaway
On Sat, 24 Jul 1999, Mark Murray wrote: > > >What is needed to make this support a more sensible number of IRQs? > > > > Mainly changing the ioctl and its clients (rndcontrol only?) to supply > > more bits. > > I am currently rewriting /dev/random (and rndcontrol). When you say rewriting, do yo

Re: rndcontrol and SMP

1999-07-24 Thread Kris Kennaway
On Sat, 24 Jul 1999, Mark Murray wrote: > > When you say rewriting, do you mean syncing with the version of the code > > in Linux (1.04, instead of our 0.95) or actually rewriting? If the latter, > > I'm curious as to what your aims are. > > I want to implement Bruce Schneier's Yarrow. Ah - I h

Re: rndcontrol and SMP

1999-07-24 Thread Kris Kennaway
On Sat, 24 Jul 1999, Mark Murray wrote: > > >What is needed to make this support a more sensible number of IRQs? > > > > Mainly changing the ioctl and its clients (rndcontrol only?) to supply > > more bits. > > I am currently rewriting /dev/random (and rndcontrol). When you say rewriting, do y

Re: PAM & LDAP in FreeBSD, and userfs too.

1999-07-23 Thread Kris Kennaway
On Thu, 22 Jul 1999, John Polstra wrote: > > On Thu, Jul 22, 1999 at 04:59:59PM +0700, Max Khon wrote: > > > > > > PAM is also "using masses of weird shared objects" but nevertheless it's > > > quite usable > > > > By statically linked binaries? > > Our PAM implementation works for static binar

<    2   3   4   5   6   7   8   >