[1654] in Kerberos
Re: need kerberised telnet (responses)
daemon@ATHENA.MIT.EDU (A.L.Ibbetson)
Fri Nov 29 15:00:11 1991
Date: 29 Nov 91 15:20:46 GMT
From: ali@ukc.ac.uk (A.L.Ibbetson)
To: kerberos@shelby.Stanford.EDU
I asked if anyone had any ideas or info on a kerberised telnet. Many
thanks to everyone who replied. There is a summary below. The PC/IP
product from FTP Software looks favourite for now, I'm trying to get
full details out of our rather secretive UK distributor (who is saying
he knows the release date but can't tell!).
Alan Ibbetson
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
From: Angus <u870572@bruny.cc.utas.edu.au>
read your news about needing secure telnet for your PC's.
A group down here in Australia at the Australian Defence Force Academy's
has developed a secure telnet 'STELNET' using a challenge-response setup.
The guy to contact is Lawrie Brown.
lpb@cs.adfa.oz.au
I have had a look at the stuff and it looks pretty good. Basically they have
added a new option -a to telnet for authentication. If you want some more
information, let me know or give lawrie a bell.
Cheers,
Angus
Sender: lpb@mnementh.cs.adfa.oz.au
Hi Alan,
Thanks for your note. Yes we do have a version of telnet with
authentication and encryption, however its not using kerberos.
A little background - several groups are working on the problem of providing
authentication and encryption capabilities in telnet (& ftp & others), with
the standards side being coordinated by the IETF telnet working group.
This group is primarily concerned with using kerberos or a similar
authentication system to assist in the process, although they're happy
to allow alternates which do not require this. We at ADFA have specified
such an alternate option which does the authentication using a challenge-
response scheme, with pre-arranged private keys (our target is a closed
user group for whom these keys are effectively an extra password). It is
this variant which we have implemented. I believe the telnet working group
has sponsered an version that incorporates their extension using kerberos
if thats what you want.
As the university is interested in commercialising our software, I can't
give it to you, although I can put you in touch with the contact if you
wish to take that further. The RFC's specifying our variant are public
so I'd be happy to send them to you (although if you have an IETF archive
nearby, you should be able to grab them from there).
Hope that answers some of your questions. Feel free to pester me for more
information if you need it.
Cheers
Lawrie Brown
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
From: Larry Hughes <hughes@logos.ucs.indiana.edu>
[Larry responded to the newsgroup that FTP were showing a klogin
package as part of their PC/IP offering at Interop - ALI]
Many thanks for your response in comp.protocols.kerberos. Since I can't
find an email address for them, I've snail mailed FTP Software Inc in
Wakefield MA.
You're welcome...you can also email "worley@ftp.com", that is Jim Worley
who believe is a sales rep. Their phone number is 617-246-0900,
and fax is 617-246-0901.
Cheers,
Larry
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
From: "casto,richard" <rc@chaucer.cc.bellcore.com>
Subject: Re: Need kerberised PC telnet
This was posted to the net a while ago in response to a post for
info about Kerberos on PCs.
---------------------------------------------------------------------------
From: sb7c+@andrew.cmu.edu (Shikhar Bajaj)
Subject: PC kerberos - short list
Date: 7 Oct 91 21:13:42 GMT
Organization: Masters student, Information Networking Institute,
Carnegie Mellon, Pittsburgh, PA
I have gotten quite a response to my recent request for PC kerberos
information. I've been getting many requests for replies and rather
than reply to each person individually, included below is a brief
description of the responses that I gotten so far.
1) Essex Systems offers a product called TCP/2 for DOS and OS/2. They
say that the DOS version supports the usual clients while the OS/2
version also has the Kerberos database server.
Contact Dan Lanciani
ddl@das.harvard.edu
2) FTP Software has a product called PC/TCP which has kerberized
versions of rcp, rsh, and rlogin. The software is due out the 4th
quarter of 1991.
Contact Jim Worley
worley@ftp.com
617-246-0900 x544
3) Simpact Corp. offers a kerberos client toolkit but they are in the
middle of selling the code. I don't known anymore about them but I hope
to get some info on the package within the next few days.
Contact Gary Levine
703 758 0190
Also,
4) Eliel Mamousette at Brown seems to have done a port for the code.
Here is the excerpt he sent me:
"the port we've done has been given over to MIT for further distribution.
If you don't get a reply to your posting on comp.protocols.kerberos by
the end of the week let me know and I'll give you an FTP site that you
can pick it up from.
It is currently compiled to work with Novell's lan workplace for dos v4.0
but folks have been able to get it to run with FTP software's libraries
as well.
If you want more details, let me know..."
For more info: Contact Eliel Mamousette
ELIEL@brownvm.brown.edu
5) Also Ed Russell over at Wang says that they will be attempting a
port of the Kerberos client for DOS in January. They haven't started
working actively on the project yet but you if need more info
Contact Edward Russell
erussell@wang.com
I've haven't heard anything about Kerberos for the Macs. I'm very happy
about the response I've gotten. I hope that this will continue in the
future.
Shikhar Bajaj
internet: sb7c+@andrew.cmu.edu
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
