Subject: Re: Kerberos: telnet to Solaris -> Bad encryption type
To: =?iso-8859-1?q?Love_H=F6rnquist_=C5strand?= <lha@kth.se>
From: Hubert Feyrer <hubert@feyrer.de>
List: tech-security
Date: 09/26/2005 08:07:55
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

---1756104163-1235301380-1127714875=:25913
Content-Type: TEXT/PLAIN; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE

On Sun, 25 Sep 2005, Love H=F6rnquist =C5strand wrote:
> The telnet in NetBSD only support single-des, why would ever want to use
> single-des today ?
>
> kenh have a telnet{,d} that does Tripple-DES, but I'm don't know it Solar=
is
> supports that.

No idea, howto find out?

About NetBSD: It would be nice to have more recent kerberized tools=20
available, as you mention. Also for ftp(d), rsh(d) etc.


> Instead I recommend you apply the GSS-API KEX from Simon Wilkinson (just
> Google for simon gssapi and ssh) to ssh and use that instead.

I tried to get along with the on-board tools for now, and see how far I=20
get. Seems "not interoperable" is the result. :(


  - Hubert
---1756104163-1235301380-1127714875=:25913--