From owner-cvs-all Wed Sep 23 23:55:49 1998 Return-Path: Received: (from daemon@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA12253 for cvs-all-outgoing; Wed, 23 Sep 1998 23:55:49 -0700 (PDT) (envelope-from owner-cvs-all) Received: from gratis.grondar.za (gratis.grondar.za [196.7.18.65]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA12229; Wed, 23 Sep 1998 23:55:39 -0700 (PDT) (envelope-from mark@grondar.za) Received: from grondar.za (IDENT:4kqG2WRQzA/ZQeL3CGS7CHyqXi9z7cgG@localhost [127.0.0.1]) by gratis.grondar.za (8.9.1/8.9.1) with ESMTP id IAA21484; Thu, 24 Sep 1998 08:55:13 +0200 (SAST) (envelope-from mark@grondar.za) Message-Id: <199809240655.IAA21484@gratis.grondar.za> To: Mike Smith cc: asami@FreeBSD.ORG (Satoshi Asami), committers@FreeBSD.ORG Subject: Re: Security and other facilities at WC CDROM - the plan. In-Reply-To: Your message of " Wed, 23 Sep 1998 16:57:28 MST." <199809232357.QAA04981@dingo.cdrom.com> References: <199809232357.QAA04981@dingo.cdrom.com> Date: Thu, 24 Sep 1998 08:55:12 +0200 From: Mark Murray Sender: owner-cvs-all@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Mike Smith wrote: > > * a) Those users who use ssh and have set up a no-password login > > * will continue to enjoy that facility. > > > > Will typing passwords over ssh work? There are some times (quite > > often, actually) that my home directory is not available and I have to > > type my password to get into paddock. > > It should; the connection is encrypted already at that point. Sure - but SSH is doing the authentication against the kerberos database, not /etc/passwd-and-friends. Kerberos has a different encoding scheme, so the password will need to be reregistered. A pain, I am sorry, but necessary. I'll try to set up a tool to assist here. M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org