|
|
Subject: OpenSSH v3.9p1 and Kerberos5 against Ad - msg#00034
List: network.openssh.general
All:
I am having trouble getting OpenSSH v3.9p1 to authenticate users
against Active Directory. What is strange is that when I log onto the
Linux box and then use the kinit program, I can authenticate just fine
against AD.
I am using MIT Kebreros v1.4 and OpenSSH V3.9p1
When I run the SSH Daemon in debug, I am getting the following error:
debug1: Kerberos password authentication failed: ASN.1 encoding ended
unexpectedly
Any thoughts?
Thanks,,
Sam
Was this page helpful?
Thread at a glance:
Previous Message by Date:
click to view message preview
Re: Hostkeys for Interfaces?
> On 2005-02-07 12:23:40 +0100, Martin Schröder wrote:
> [SNIP]
>
> Thanks to those pointing towards solutions with multiple > > sshds, but
that's not what I really want.
>
> sshd_config(5) mentions the possible of having multiple
> host key files -- does that mean one sshd can have
> multiple (different) host keys?
Yes HostKey options can point to different files.
Limitation is that for each type "ssh-dss ",
"ssh-rsa", "rsa1", etc. sshd use first listed in configuration.
-----
Get X.509 certificates support in OpenSSH:
http://roumenpetrov.info/openssh/
Next Message by Date:
click to view message preview
PKA on OpenSSH on Cygwin
Hello all,
Quick question. Am I correct in my understanding that private key
authentication can not be performed for any account except the account the
openssh service is run under? I am referencing this text:
"Cygwin has some limitations with regard to PKA. PKA on the server can only
be set up on the account under which the SSHD daemon (service) is run. That
means for PKA logins, the connection will always log in as the 'sshd'
account on the remote server. If you desire access to your own account, you
will have to run 'ssh ' and enter a password, assuming you have previously
established your account on that server."
on Drew Hunts' guide to Setting up Secure Shell with Public Key
Authentication Capability on Cygwin.
Thanks in advance,
Dan
Previous Message by Thread:
click to view message preview
CFP for SyScAN'05
CALL FOR PAPER
SYSCAN’05
SYMPOSIUM ON SECURITY AND ASIA NETWORKING 2005
18-19 AUGUST 2005
SINGAPORE
SYSCAN’05
The Symposium on Security for Asia Network aims to be a very different
security conference from the rest of the security conferences that the
information security community in Asia has come to be so familiar and
frustrated with. SyScAN intends to be a non-product, non-vendor biased
security conference. It is the aspiration of SyScAN to congregate, in
Singapore, the best security experts in their various fields, to share
their research, discovery and experience with all security enthusiasts
in Asia.
This two-day symposium would be held in a relaxed and informal
atmosphere, allowing all participants to enjoy themselves whilst
expanding their knowledge on information security. The conference is
single tracked and speakers are allocated an hour each for their
presentation.
SPEAKERS PRIVILEGES
The airfare and accommodation expenses of all selected speaker will be
covered by the conference organizer on a reimbursement basis. Receipts
for airfare must be produced. The organizer will also provide breakfast,
lunch and dinner to all speakers during the conference.
CFP SUBMISSION
CFP submission must include the following information:
1) Brief biography including list of publications and papers
published previously.
2) Proposed presentation title, synopsis and description.
3) Contact Information (full name, alias, handler, e-mail, postal
address, phone,
fax, photo, country of origin, special dietary requirement).
4) Employment and/or affiliations information.
5) Any significant presentation and educational experience/background.
6) Why is your material different or innovative or significant or an
important tutorial?
All submission must be in English in either MS Office or OpenOffice or
PDF format. Please send submission to cfp@xxxxxxxxxxx Submission must be
done no later than 8th May 2005.
IMPORTANT DATES
Final CFP Submission – 8th May 2005
Notification of Acceptance or Rejection – 1st June 2005
Final Accepted Presentation Material Submission – 31st July 2005
TOPICS
The focuses for SyScAN’05 are as follow:
Vulnerabilities
Exploits Technologies
Telecommunication and Mobile Security
Forensic
The scopes of the focus are broad and include, but not restricted to the
following areas:
Vulnerabilities
Assessment and Analysis
• Reverse Engineering
• Automated Tools
Operating Systems, Applications, Networks
• Windows, Linux, BSD, AIX, Unix
• .NET, Java
• Network Protocols
• Secure OS Techniques and Development (e.g. Selinux, grsecurity, RSBAC
etc)
Exploit Technologies
• Exploiting IDS, AV, Hardened OS
• Application Exploits - macros, scripts, etc.
• Virus, Worms, Malware and Trojans
• Database Exploits
• Tools
• Shellcode techniques and development (e.g. IMPACT, CANVAS, MOSDEF,
Metasploit etc)
• Rootkit techniques and development (e.g. kernel rootkit development,
detection & prevention)
Telecommunication and Mobile Security
• Mobile Devices - mobile phones, PDAs, etc.
• Bluetooth and WLAN
• 3G, GPRS, GSM and CDMA
• VoIP Security
• Telecommunication Systems – PSTN etc
Forensic
• Automated Tools
• Anti-Forensic Techniques and Developments
New Technologies
• Events Correlations
• Incidence and Response
• Infrastructure Security
• New or Alternative Security Methodologies
• Networks, Systems and Application Security
Other
• Information/Cyber Warfare
• Information/Cyber Terrorism
• Enterprise Security Management
• Compliance Management
OTHER INFORMATION
Please feel free to visit SyScAN’04 website to get a feel what this
conference is all about – SHARE AND HAVE FUN!
Also lookout here for the latest update on SyScAN’05.
Organiser
SyScAN'05
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 265.8.6 - Release Date: 2/7/2005
Next Message by Thread:
click to view message preview
PKA on OpenSSH on Cygwin
Hello all,
Quick question. Am I correct in my understanding that private key
authentication can not be performed for any account except the account the
openssh service is run under? I am referencing this text:
"Cygwin has some limitations with regard to PKA. PKA on the server can only
be set up on the account under which the SSHD daemon (service) is run. That
means for PKA logins, the connection will always log in as the 'sshd'
account on the remote server. If you desire access to your own account, you
will have to run 'ssh ' and enter a password, assuming you have previously
established your account on that server."
on Drew Hunts' guide to Setting up Secure Shell with Public Key
Authentication Capability on Cygwin.
Thanks in advance,
Dan
|
|