Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 4 Oct 1998 07:25:22 -0700 (PDT)
From:      thomas@x-berg.in-berlin.de
To:        freebsd-gnats-submit@FreeBSD.ORG
Subject:   bin/8142: freebsd 2.2.7 implementation of key(1) [stand-alone program for computing responses to S/Key challenges] differs from the latest of the authorīs S/KEY One-Time Password System (Version 1.1 11-01- imar.gz at thumper.bellcore.com [128.96.41.1]   D
Message-ID:  <199810041425.HAA14220@hub.freebsd.org>

next in thread | raw e-mail | index | archive | help
>Number:         8142
>Category:       bin
>Synopsis:       freebsd 2.2.7 implementation of key(1) [stand-alone program for computing responses to S/Key challenges] differs from the latest of the authorīs S/KEY One-Time Password System (Version 1.1 11-01- imar.gz at thumper.bellcore.com [128.96.41.1]
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Oct  4 07:30:01 PDT 1998
>Last-Modified:
>Originator:     thomas osterried
>Organization:
in-berlin e.v.
>Release:        FreeBSD 2.2.7
>Environment:
FreeBSD ratte.in-berlin.de 2.2.7-RELEASE FreeBSD 2.2.7-RELEASE #0: Thu Aug 13 21:17:55 CEST 1998     root@ratte.in-berlin.de:/usr/src/sys/compile/RATTE980808A  i386

>Description:
i was happy to find skey implemented on my FreeBSD 2.2.7-RELEASE system.
everything works fine except you want to generate a key on an other system.
in my case i wanted to run key (skey skey-1.1b.tar.gz from thumper.bellcore.com [128.96.41.1]   Directory: /pub/nmh)
compiled on my other maschine (a linux host) and could not login with the
generated key: it always differs.
i tried to compile skey-1.1b on my FreeBSD-2.2.7 maschine, and the generated key
is the same as the one on my linux maschine and it differs from the key from /usr/bin/key
on the (same) FreeBSD-2.2.7 maschine.

in other words: the key implementation on FreeBSD-2.2.7 is not compatible
anymore. it may be older (looking at the man page, FreeBSDīs key program may be 2 years older (1991 instead of 1993 in the skey-1.1b implementation)
 
>How-To-Repeat:
get skey1.1b, compile it and verify the output of
./src/key 
and /usr/bin/key
using the same options and the same passoword.
it differs, and ./src/keyīs output grants no access.
>Fix:
well, hmm, letīs have a look at the source.
there may have been a decision of the freebsd team in not upgrading.

>Audit-Trail:
>Unformatted:
 Directory: /pub/nmh
 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810041425.HAA14220>