[4258] in Kerberos
Re: Secure Login / File Transfer
daemon@ATHENA.MIT.EDU (Herbert Neugebauer)
Tue Nov 29 17:20:57 1994
To: kerberos@MIT.EDU
Date: Tue, 29 Nov 1994 07:52:24 GMT
From: haen@bbn.hp.com (Herbert Neugebauer)
Reply-To: haen@hpbbn.bbn.hp.com
In article <3avp59$bfn@hpbblb.bbn.hp.com>,
Herbert Neugebauer <haen@hpbbn.bbn.hp.com> wrote:
>>
>>For our beta release we're still using rlogin and ftp for login
>>and file transfer purposes. But using these tools we have to send
>>passwords (somtimes even the root password) over the network.
>>Since the bank uses DCE on each machine I'm now wondering if there
>>are already tools available based on DCE rpc's and DCE security
>>features that implement secure logins or file transfers over
>>the net (WAN!) without the need to transfer passwords.
>>
>>Are there also non DCE-based tools available that might solve the problem
>>of sending readable passwords over the net?
Hi
I've received a lot of useful information, mostly about Kerberos.
Now there's a problem most of you were not aware about: I'm working
for HP, but my division is not located in the US and our customer not
also.
On nic.funet.fi, there is a version of bones with some sort of DES
encryption (I did not yet have the time to compile and test the
package). But this seems to be Kerberos 4 patchlevel 9.
Is there a Kerberos 5 version available outside the US?
Are there other tools available that might solve the problem described
in my original post above? (I've now almost excluded DCE from the list
of possible solutions because of the performance problems on WAN.) The Skey
package (generating "one time passwords") has other problems and might
not be usable for us though I'm still investigating that.
Thanx in advance
Herbert
--
--- Herbert Neugebauer private eMail: haen@veces.bb.bawue.de ---
| Hewlett Packard GmbH Boeblingen HP eMail: haen@hpbbn.bbn.hp.com |
| Herrenberger Str. 130 Werk 4 HP Phone: +49 7031 14 7318 |
| NSMD - Solution Engineering HP Fax : +49 7031 14 1388 |
| Network & System Management Division Germany |
---------------------------------------------------------------------------
| #include <std.disclaimer> : The statements above are my own and do |
| not necessarily reflect official policies of HP. |
---------------------------------------------------------------------------
