[4475] in testers

home help back first fref pref prev next nref lref last post

Re: Linux 8.4.4: Remote access burps

daemon@ATHENA.MIT.EDU (Thomas Bushnell, BSG)
Tue Jun 20 03:34:12 2000

To: "Christopher D. Beland" <beland@MIT.EDU>
Cc: testers@MIT.EDU
From: tb@MIT.EDU (Thomas Bushnell, BSG)
Date: 20 Jun 2000 03:33:56 -0400
In-Reply-To: "Christopher D. Beland"'s message of "Tue, 20 Jun 2000 02:32:52 -0400"
Message-ID: <u1hu2eo4xi3.fsf@oliver.mit.edu>

"Christopher D. Beland" <beland@MIT.EDU> writes:

> Maybe I am just on crack this evening.

You weren't, but I just added you.

> With or without "LOGIN=/usr/athena/etc/login.krb5" in /etc/conf.getty
> and with oor without /etc/krb5.keytab, I got the following behavior:
> 
> sshing or ktelnetting to whack-a-mole logs me in normally without
> asking for password.  sshing or ktelnetting back from that machine
> does the same.  However, the following happens when I try to
> telnet/ssh from No-Whammies back to itself:

I'm no expert on what kerberos and ssh are supposed to be doing here.
It appears that ticket forwarding is not happening; this is further
likely to be the case given that it's KERBEROS4 authentication that's
being used.


home help back first fref pref prev next nref lref last post