From owner-freebsd-security Thu Mar 25 10:51:31 1999 Delivered-To: freebsd-security@freebsd.org Received: from dnai.com (dnai.com [207.181.194.98]) by hub.freebsd.org (Postfix) with ESMTP id 2B2DA14D21 for ; Thu, 25 Mar 1999 10:51:01 -0800 (PST) (envelope-from miket@dnai.com) Received: from einstein (dnai-207-181-255-51.dialup.dnai.com [207.181.255.51]) by dnai.com (8.8.8/8.8.8) with SMTP id KAA20523; Thu, 25 Mar 1999 10:47:32 -0800 (PST) Message-Id: <4.1.19990325101825.00a28bf0@mail.dnai.com> X-Sender: miket@mail.dnai.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1 Date: Thu, 25 Mar 1999 10:21:04 -0800 To: Matthew Dillon From: Mike Thompson Subject: Re: Kerberos vs SSH Cc: Gary Gaskell , freebsd-security@FreeBSD.ORG In-Reply-To: <199903250901.BAA95914@apollo.backplane.com> References: <4.1.19990324233231.00a02e40@mail.dnai.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Matthew, I know what you mean. I am currently waiting to hear back from DataFellows with regards to a quote for SSH v2. We don't mind paying for SSH, but the price of $495 (from their web site) a server will certainly lead me to look for another solution if that price indeed holds. Also, it seems that SSH v2 does not support Kerberos like SSH v1 (at least not yet) which makes centralized management of keys and passwords a headache. Mike At 01:01 AM 3/25/99 -0800, Matthew Dillon wrote: > BEST currently uses SSH v1 under the ISP terms in the COPYING notice. > > We've looked into using SSH v2 a number of times but two factors have > kept us from being able to switch: (1) the fact that the author made > SSH v2 incompatible with SSH v1, and (2) because, when we checked, the > licensing terms were too overpriced ( but that was a year ago and I don't > remember what the price was ). So we aren't using v2. > > The whole thing has really miffed me, actually. I like to support > free software, especially free software of the quality level and > usefullness of ssh, but the authors have made it rather difficult to do. > > I haven't checked the status of SSH v2 recently, so it is possible that > commercial licensing is more doable now. > > -Matt > Matthew Dillon > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message