osdir.com
mailing list archive

Subject: OpenSSH v3.9p1 and Kerberos5 against Ad - msg#00034

List: network.openssh.general

Date: Prev Next Index Thread: Prev Next Index
All:

I am having trouble getting OpenSSH v3.9p1 to authenticate users
against Active Directory. What is strange is that when I log onto the
Linux box and then use the kinit program, I can authenticate just fine
against AD.

I am using MIT Kebreros v1.4 and OpenSSH V3.9p1

When I run the SSH Daemon in debug, I am getting the following error:

debug1: Kerberos password authentication failed: ASN.1 encoding ended
unexpectedly


Any thoughts?

Thanks,,
Sam



Was this page helpful?
Yes No
Thread at a glance:

Previous Message by Date: click to view message preview

Re: Hostkeys for Interfaces?

> On 2005-02-07 12:23:40 +0100, Martin Schröder wrote: > [SNIP] > > Thanks to those pointing towards solutions with multiple > > sshds, but that's not what I really want. > > sshd_config(5) mentions the possible of having multiple > host key files -- does that mean one sshd can have > multiple (different) host keys? Yes HostKey options can point to different files. Limitation is that for each type "ssh-dss ", "ssh-rsa", "rsa1", etc. sshd use first listed in configuration. ----- Get X.509 certificates support in OpenSSH: http://roumenpetrov.info/openssh/

Next Message by Date: click to view message preview

PKA on OpenSSH on Cygwin

Hello all, Quick question. Am I correct in my understanding that private key authentication can not be performed for any account except the account the openssh service is run under? I am referencing this text: "Cygwin has some limitations with regard to PKA. PKA on the server can only be set up on the account under which the SSHD daemon (service) is run. That means for PKA logins, the connection will always log in as the 'sshd' account on the remote server. If you desire access to your own account, you will have to run 'ssh ' and enter a password, assuming you have previously established your account on that server." on Drew Hunts' guide to Setting up Secure Shell with Public Key Authentication Capability on Cygwin. Thanks in advance, Dan

Previous Message by Thread: click to view message preview

CFP for SyScAN'05

CALL FOR PAPER SYSCAN’05 SYMPOSIUM ON SECURITY AND ASIA NETWORKING 2005 18-19 AUGUST 2005 SINGAPORE SYSCAN’05 The Symposium on Security for Asia Network aims to be a very different security conference from the rest of the security conferences that the information security community in Asia has come to be so familiar and frustrated with. SyScAN intends to be a non-product, non-vendor biased security conference. It is the aspiration of SyScAN to congregate, in Singapore, the best security experts in their various fields, to share their research, discovery and experience with all security enthusiasts in Asia. This two-day symposium would be held in a relaxed and informal atmosphere, allowing all participants to enjoy themselves whilst expanding their knowledge on information security. The conference is single tracked and speakers are allocated an hour each for their presentation. SPEAKERS PRIVILEGES The airfare and accommodation expenses of all selected speaker will be covered by the conference organizer on a reimbursement basis. Receipts for airfare must be produced. The organizer will also provide breakfast, lunch and dinner to all speakers during the conference. CFP SUBMISSION CFP submission must include the following information: 1) Brief biography including list of publications and papers published previously. 2) Proposed presentation title, synopsis and description. 3) Contact Information (full name, alias, handler, e-mail, postal address, phone, fax, photo, country of origin, special dietary requirement). 4) Employment and/or affiliations information. 5) Any significant presentation and educational experience/background. 6) Why is your material different or innovative or significant or an important tutorial? All submission must be in English in either MS Office or OpenOffice or PDF format. Please send submission to cfp@xxxxxxxxxxx Submission must be done no later than 8th May 2005. IMPORTANT DATES Final CFP Submission – 8th May 2005 Notification of Acceptance or Rejection – 1st June 2005 Final Accepted Presentation Material Submission – 31st July 2005 TOPICS The focuses for SyScAN’05 are as follow: Vulnerabilities Exploits Technologies Telecommunication and Mobile Security Forensic The scopes of the focus are broad and include, but not restricted to the following areas: Vulnerabilities Assessment and Analysis • Reverse Engineering • Automated Tools Operating Systems, Applications, Networks • Windows, Linux, BSD, AIX, Unix • .NET, Java • Network Protocols • Secure OS Techniques and Development (e.g. Selinux, grsecurity, RSBAC etc) Exploit Technologies • Exploiting IDS, AV, Hardened OS • Application Exploits - macros, scripts, etc. • Virus, Worms, Malware and Trojans • Database Exploits • Tools • Shellcode techniques and development (e.g. IMPACT, CANVAS, MOSDEF, Metasploit etc) • Rootkit techniques and development (e.g. kernel rootkit development, detection & prevention) Telecommunication and Mobile Security • Mobile Devices - mobile phones, PDAs, etc. • Bluetooth and WLAN • 3G, GPRS, GSM and CDMA • VoIP Security • Telecommunication Systems – PSTN etc Forensic • Automated Tools • Anti-Forensic Techniques and Developments New Technologies • Events Correlations • Incidence and Response • Infrastructure Security • New or Alternative Security Methodologies • Networks, Systems and Application Security Other • Information/Cyber Warfare • Information/Cyber Terrorism • Enterprise Security Management • Compliance Management OTHER INFORMATION Please feel free to visit SyScAN’04 website to get a feel what this conference is all about – SHARE AND HAVE FUN! Also lookout here for the latest update on SyScAN’05. Organiser SyScAN'05 -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.300 / Virus Database: 265.8.6 - Release Date: 2/7/2005

Next Message by Thread: click to view message preview

PKA on OpenSSH on Cygwin

Hello all, Quick question. Am I correct in my understanding that private key authentication can not be performed for any account except the account the openssh service is run under? I am referencing this text: "Cygwin has some limitations with regard to PKA. PKA on the server can only be set up on the account under which the SSHD daemon (service) is run. That means for PKA logins, the connection will always log in as the 'sshd' account on the remote server. If you desire access to your own account, you will have to run 'ssh ' and enter a password, assuming you have previously established your account on that server." on Drew Hunts' guide to Setting up Secure Shell with Public Key Authentication Capability on Cygwin. Thanks in advance, Dan
Sign up for updates to this mailing list. email:
Loading Comments...
Home | News | Patents | Sitemap | FAQ | advertise

Advertising by