From owner-freebsd-security Mon Oct 9 22: 7: 9 2000 Delivered-To: freebsd-security@freebsd.org Received: from faith.cs.utah.edu (faith.cs.utah.edu [155.99.198.108]) by hub.freebsd.org (Postfix) with ESMTP id DC86C37B502 for ; Mon, 9 Oct 2000 22:07:04 -0700 (PDT) Received: (from danderse@localhost) by faith.cs.utah.edu (8.9.3/8.9.3) id XAA16526; Mon, 9 Oct 2000 23:06:52 -0600 (MDT) Message-Id: <200010100506.XAA16526@faith.cs.utah.edu> Subject: Re: What is this and how do I control it ? To: Stanley.Hopcroft@IPAustralia.Gov.AU (Stanley Hopcroft) Date: Mon, 9 Oct 2000 23:06:52 -0600 (MDT) Cc: Security@FreeBSD.ORG, Carl.Makin@IPAustralia.Gov.AU (Carl Makin), shaddon@IPAustralia.Gov.AU In-Reply-To: from "Stanley Hopcroft" at Oct 10, 2000 01:55:03 PM From: "David G. Andersen" X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Lo and behold, Stanley Hopcroft once said: > > Trying 10.0.100.252... > Connected to tsitc.aipo.gov.au. > Escape character is '^]'. > Trying SRA secure login: > User (anwsmh): > > What does this mean and how do I manage it ? It's exactly what it seems - it's a secure login protocol. SRA is secure RPC authentication mechanism based on diffie-hellman. What do you mean by "manage?" > This telnet client, ktelnet 0.61 seems to negotiate the telnet > authentication and encryption options by itself (!) but the FreeBSD > telnet, invoked from an rxvt does not get this distinctive SRA secure > login prompt. telnet -a will enable authentication. You can accomplish the sme thing automatically by putting: host set autologin on in your .telnetrc file > What means of authentication do they use ? SRA. > This is great, but I would like to know what is happening and how to > reliably reproduce it eg from rxvts on the same client host, from > ktelnet 0.61 on another machine. Yup. See above. -Dave -- work: dga@lcs.mit.edu me: dga@pobox.com MIT Laboratory for Computer Science http://www.angio.net/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message