From owner-freebsd-security Mon Feb 26 13:09:26 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id NAA16326 for security-outgoing; Mon, 26 Feb 1996 13:09:26 -0800 (PST) Received: from merit.edu (merit.edu [35.1.1.42]) by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id NAA16321 for ; Mon, 26 Feb 1996 13:09:23 -0800 (PST) Received: from ohm.merit.edu (ohm.merit.edu [198.108.60.65]) by merit.edu (8.7.3/merit-2.0) with ESMTP id QAA26936; Mon, 26 Feb 1996 16:07:28 -0500 (EST) From: William Bulley Received: (web@localhost) by ohm.merit.edu (8.6.9/8.6.5) id QAA09158; Mon, 26 Feb 1996 16:17:06 -0500 Message-Id: <199602262117.QAA09158@ohm.merit.edu> Subject: Re: Informing users of cracked passwords? To: yankee@anna.az.com Date: Mon, 26 Feb 1996 16:17:05 -0500 (EST) Cc: freebsd-security@freebsd.org, roberto@keltia.freenix.fr, ngps@cbn.com.sg, james@teamos2.org, rashid@rk.ios.com, taob@io.org In-Reply-To: from "az.com" at Feb 26, 96 07:51:06 am X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-security@freebsd.org Precedence: bulk According to az.com: > > Perhaps it would be nice project to try to upgrade FreeBSD's password > authentication and add an option which would move it away from the host > and onto a separate system and also allow it to check for qualified > passwords. The system's design would make it impossible in any way for > even the owner of the authentication server to know what the real or > encrypted version of the passwords were. (The first idea is similar to > cisco TACACS or XYLOGICS Annex's ACP_PASSWD, the second idea is mine (or > undoubtedly someone else's too?)) I would recommend RADIUS for this job. I would be willing to give some informal quidance to those interested in doing the actual work... Regards, web... -- William Bulley, N8NXN Senior Systems Research Programmer Merit Network Inc. Domain: web@merit.edu 4251 Plymouth Road MaBell: (313) 764-9993 Ann Arbor, Michigan 48105-2785 Fax: (313) 747-3185