Date: Fri, 13 Nov 1998 19:38:08 +0300 From: ark@eltex.ru To: cschuber@uumail.gov.bc.ca Cc: robert+freebsd@cyrus.watson.org, oortiz@LCSI.COM, freebsd-security@FreeBSD.ORG Subject: Re: Intruder Lockout Message-ID: <199811131638.TAA14441@paranoid.eltex.spb.ru> In-Reply-To: <199811131452.GAA15069@cwsys.cwsent.com> from "Cy Schubert - ITSD Open Systems Group <cschuber@uumail.gov.bc.ca>"
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
nuqneH,
Kerberos is a big problem itself: you have to kerberize _everything_
that is even harder than SSLeay'ing it..
Cy Schubert - ITSD Open Systems Group <cschuber@uumail.gov.bc.ca> said :
> > in the POP or IMAP mail reader -- it may retry the connection several
> > times (if set to check mail often) before the user notices, and lockout
> > can occur quickly in that kind of situation.
> >
> > Probably the best solution is to enforce better passwords, or use of
> > PK-based authentication. Or one-time passwords.
>
> How about Kerberos? FreeBSD comes with Kerberos IV and there is a
> Kerberos V port in the ports collection.
> with "unsubscribe freebsd-security" in the body of the message
>
_ _ _ _ _ _ _
{::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_
(##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_|
[||] [||] [||] Do i believe in Bible? Hell,man,i've seen one!
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
iQCVAwUBNkxgbKH/mIJW9LeBAQGk1wP/TcSWp7VSm3uMKVjEYBbZANB53vPveEPZ
tKqa8nKmrAM4HwV5oOjg22yGSrZuv3ZIF+T+eEu+/ASEy0qRtvKs23WDEycXokOA
76HUvZGwf8zhSWTLia9+1JRlYyKKfZKJ5exY8HN6ldOJyjIBCsWWFISl2a8zAMhL
8IE1bJsVEUA=
=VoKE
-----END PGP SIGNATURE-----
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199811131638.TAA14441>