Subject: Re: Kerberos: telnet to Solaris -> Bad encryption type
To: =?iso-8859-1?q?Love_H=F6rnquist_=C5strand?= <>
From: Hubert Feyrer <>
List: tech-security
Date: 09/26/2005 08:07:55
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

Content-Type: TEXT/PLAIN; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Sun, 25 Sep 2005, Love H=F6rnquist =C5strand wrote:
> The telnet in NetBSD only support single-des, why would ever want to use
> single-des today ?
> kenh have a telnet{,d} that does Tripple-DES, but I'm don't know it Solar=
> supports that.

No idea, howto find out?

About NetBSD: It would be nice to have more recent kerberized tools=20
available, as you mention. Also for ftp(d), rsh(d) etc.

> Instead I recommend you apply the GSS-API KEX from Simon Wilkinson (just
> Google for simon gssapi and ssh) to ssh and use that instead.

I tried to get along with the on-board tools for now, and see how far I=20
get. Seems "not interoperable" is the result. :(

  - Hubert