Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 4 Oct 1997 19:59:51 -0600
From:      John-David Childs <jdc@nterprise.net>
To:        chip@jlc.net
Cc:        freebsd-questions@freebsd.org
Subject:   Re: S/Key and popper
Message-ID:  <19971004195951.62720@denver.net>
In-Reply-To: <19971004184537.15202@verdi.jlc.net>; from Chip Marshall on Sat, Oct 04, 1997 at 06:45:37PM -0400
References:  <19971004184537.15202@verdi.jlc.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Saturday October  4, 1997, Chip Marshall <chip@jlc.net>
 had this to say about "S/Key and popper":

> I work for an ISP, and we are trying to tighten our security a bit.
> For our mail server, we are restricting access to telnetd using
> tcp_wrappers, but would also like to force S/Key instead of normal
> passwords. However, our customers mostly check their mail using
> standard passwords and know nothing of S/Key. I was wondering how
> to go about permiting normal passwords from popper, but not any
> other service (telnetd and such.) Can anyone help me?

The problem with this is that lusers often use the same password for mail
and telnet/ftp/web/etc..  If one is unencrypted and sniffable, why waste
time on the others (at least as far as S/Key, Kerberos, etc).

-- 
John-David Childs (JC612)       Enterprise Internet Solutions
System Administrator            @denver.net/Internet-Coach/@ronan.net
  & Network Engineer            1031 S. Parker Rd. #I-8 Denver, CO 80231
As of this^H^H^H^H next week, passwords will be entered in Morse code.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19971004195951.62720>