From owner-cvs-all  Thu Sep 24 12:26:30 1998
Return-Path: <owner-cvs-all>
Received: (from daemon@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id MAA26986
          for cvs-all-outgoing; Thu, 24 Sep 1998 12:26:30 -0700 (PDT)
          (envelope-from owner-cvs-all)
Received: from ns.mt.sri.com (sri-gw.MT.net [206.127.105.141])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA26962
          for <committers@FreeBSD.ORG>; Thu, 24 Sep 1998 12:26:21 -0700 (PDT)
          (envelope-from nate@mt.sri.com)
Received: from mt.sri.com (rocky.mt.sri.com [206.127.76.100])
	by ns.mt.sri.com (8.8.8/8.8.8) with SMTP id NAA25682;
	Thu, 24 Sep 1998 13:26:04 -0600 (MDT)
	(envelope-from nate@rocky.mt.sri.com)
Received: by mt.sri.com (SMI-8.6/SMI-SVR4)
	id NAA00745; Thu, 24 Sep 1998 13:26:03 -0600
Date: Thu, 24 Sep 1998 13:26:03 -0600
Message-Id: <199809241926.NAA00745@mt.sri.com>
From: Nate Williams <nate@mt.sri.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Jonathan Lemon <jlemon@americantv.com>
Cc: Nate Williams <nate@mt.sri.com>, Mark Murray <mark@grondar.za>,
        committers@FreeBSD.ORG
Subject: Re: Security and other facilities at WC CDROM - the plan.
In-Reply-To: <19980924142007.20035@right.PCS>
References: <199809232027.WAA19326@gratis.grondar.za>
	<19980924195216.45708@nothing-going-on.org>
	<199809241858.UAA24764@gratis.grondar.za>
	<199809241913.NAA00626@mt.sri.com>
	<19980924142007.20035@right.PCS>
X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid
Sender: owner-cvs-all@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > > The password you type will suddenly stop working unless you
> > > a) set up your account at WC to accept no-password logins OR
> > > b) work with us to get your password registered with kerberos.
> > 
> > What about folks who are using OS's at times that don't do SSH (ie;
> > Win32)?  They also don't have a kerberized telnet available. :(
> 
> Try the CRT client for windows.  They have an SSH version out, and
> (IIRC) the license fee is reasonable ($20, or so).

But sometimes I'm places where I don't have access to the SSH version
(read, business trips where I don't have my box with me).

> If you are doing "telnet" from a winlose box, you're going to have to
> replace the native telnet client anyways, or slowly lose your sanity.

Agreed, but *free* is a much better price than $20, especially when I
don't have the $20 version many times.

Basically, what I'm asking is there a *secure* way of allowing logins
over the net besides ssh/kerberized-telnet?



Nate