Displaying 20 results from an estimated 7000 matches similar to: "Re: About strongs passwords! -- PAM"
2018 Dec 19
2
RFE: OpenSSH Support for PKCS11 Funneling to PAM for Kerberos/PKINIT
Alon,
On 12/18/2018 06:52 PM, Alon Bar-Lev wrote:
> OK... So you have an issue...
>
> First, you need to delegate your smartcard to remote machine, probably
> using unix socket redirection managed by openssh. This can be done in
> many levels...
> 1. Delegate USB device, this will enable only exclusive usage of the
> smartcard by remote machine.
> 2. Delegate PC/SC, this
2018 Dec 18
2
RFE: OpenSSH Support for PKCS11 Funneling to PAM for Kerberos/PKINIT
I know OpenSSH currently supports PKCS11 devices (such as smartcards)
for publickey authentication, but I would love to see PKCS11 extended
further. It is currently possible to perform PKCS11 certificate
authentication, via pam_krb5.so (on Linux at least and likely something
similar on other *NIX) which allows smartcard auth to a Kerberos
(including AD) server, where a TGT can also be granted.
2018 Dec 18
2
RFE: OpenSSH Support for PKCS11 Funneling to PAM for Kerberos/PKINIT
Alon,
I should have provided more background. You are assuming that I could
perform the PKINIT prior to connecting to the SSH server. In this case
(and others) there is an interest in not exposing the kerberos servers
to the world and thus someone connecting remotely would not be able to
obtain a TGT or do a PKINIT. The goal would be for SSH to handle all
the auth and only after connecting to
2005 May 13
1
Re: About strongs passwords! -- PAM
From: israel.garcia at cimex.com.cu
> 1. My users have to work on the shell because, they run a C++
> scritp to work in tha database..
If it's just 1 or 2 scripts, consider limiting access to programs with another
shell and/or a web or other front-end that only lets them launch a specific
process.
> 2. So I want to force my users to pick a strong password.. Is there some
>
2002 Jul 20
0
opensc smartcard support does not work
Hi,
sorry, I'm not on the list, so please answer directly.
I use opensc-0.7.0 and pcsc-lite-1.1.1 under FreeBSD 4.6
with Gemplus 410 and 430 smartcard readers and Schlumberger
cryptoflex smartcards.
I used openssh-3.2.2p1 but the relevant file scard-opensc.c
is unchanged in 3.4.
RSA authentication to a remote host running opensshd
did not work with the smartcard.
Investigating the problem
2008 Aug 21
2
[Bug 1512] New: Only a single smartcard/PIN is supported by the ssh-agent
https://bugzilla.mindrot.org/show_bug.cgi?id=1512
Summary: Only a single smartcard/PIN is supported by the
ssh-agent
Product: Portable OpenSSH
Version: 5.1p1
Platform: Other
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Smartcard
AssignedTo:
2001 Nov 17
1
Muscle Card Edge with OpenSSH
Hi all,
a modified version of the OpenSSH client programs
has been released on the Smart Sign Web Site
http://smartsign.sourceforge.net
that uses Muscle Card Edge technology. It directly
generates an OpenSSH private key on to a JavaCard
2.1.1 compliant smart card (using CardEdge key generation
facility) and uses it from the card itself.
Private key can never get compromised after generation !
2017 Sep 21
2
Revocation with CRL doesn't work for smartcards
Hi,
I have a smartcard which is revoked in the Certificate Revocation List
(CRL) but I can still login. Seams like the CRL check is not performed. Any
known bug around this?
Server setup:
- Samba 4.4 on Debian as AD DC
- Created domain MYDOM
- smb.conf (extract):
tls enabled = yes
tls crlfile = tls/mycrl.pem (default is to look under private/ folder)
Client setup:
- Windows 7 machine as
2005 Apr 02
3
OpenSSH and Smartcard
Hi,
I am not sure if this the right place for the question. Sorry if not ...
My System:
SuSE 9.2
OpenSSH 3.9p1
I have trouble to use a Smartcard with openssh. If i try to connect
directly to the Smartcard, it fails:
ssh -I 0:45 localhost
card-etoken.c:175:etoken_check_sw: required access right not granted
card-etoken.c:631:do_compute_signature: returning with: Security status
not satisfied
2015 Apr 29
1
Virtual Smartcard GPG
Hi. Is is possible to use GPG on the host instead of NSS with virtual
smartcards? Please document how or add support for it.
Can a virtual smartcard make the host less secure? If there are bugs in
GPG/NSS backend on the host can they be abused by untrusted code in the
vm?
2019 Jun 16
0
Self-signed TLS client certificates
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 16 June 2019 15:47 Marvin Gülker via dovecot <
<a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a>> wrote:
</div>
2019 Jun 16
2
Self-signed TLS client certificates
Dear List,
I self-host my e-mail and run Dovecot since ever I do that. Dovecot
version is 2.3.4.1 (f79e8e7e4), running on Debian testing.
Now I am trying to configure Dovecot for client TLS certificates. I have
a self-signed certificate whose private key resides on a smartcard
(Yubikey, to be exact). I wanted Dovecot to accept that TLS client
certificate instead of a password. So I searched and
2007 Sep 25
9
OpenSSH PKCS#11merge
[[Sending again, as for some strange reason it is not accepted]]
Hello OpenSSH developers,
I maintain external patch for PKCS#11 smartcard support into
OpenSSH[1] , many users already apply and use this patch.
I wish to know if anyone is interesting in working toward merging this
into mainline.
I had some discussion with Damien Miller, but then he disappeared.
Having standard smartcard
2000 Oct 17
5
Smartcards & SSH
Hi all,
I'm new to this mailing list, so I apologize if my question
is "obsolete" for you.
I'd like to know if anybody has a clear idea about
how to connect smartcards to the SSH framework.
I yet got a modified ssh-agent (by Stephen Pellicer)
that uses SSP-Lite (CyberflexAccess driver by me)
in order to use the smartcard instead of the HD files.
Instead, I'd like to
2004 Nov 27
0
buffer_get_bignum2: negative numbers not supported
Hi
I have added smartcard support to PuTTY and this worked fine
until yesterday when we replaced one of our Slackware-9 machines
by a Slackware-10 one.
Slackware-9 contained OpenSSH 3.5p1 while Slackware-10 has
OpenSSH 3.8.1p1.
Now the same keys that worked before do not work anymore and
OpenSSH fails with
buffer_get_bignum2: negative numbers not supported
I first supected that my
2015 Apr 29
0
Virtual Smartcard GPG
Hi. Is is possible to use GPG on the host instead of NSS with virtual
smartcards? Please document how or add support for it.
Can a virtual smartcard make the host less secure? If there are bugs in
GPG/NSS backend on the host can they be abused by untrusted code in the
vm?
2005 May 12
6
About strongs passwords!
List, It's amazing the soon the messages on this list are answered, I am
glad and I want to thank you all for that...
Here is my question, I have a DataBase CentOS server working with about
150 users connected via ssh, so I want to set up for all users strongs
passwords, I mean, 8 or more caracters, with ,.;* , ect....... Is there
some option, bash command which do that?
Is there some HOWto,
2007 Sep 24
0
PKCS#11merge
Hello OpenSSH developers,
I maintain external patch for PKCS#11 smartcard support into
OpenSSH[1] , many users already apply and use this patch.
I wish to know if anyone is interesting in working toward merging this
into mainline.
I had some discussion with Damien Miller, but then he disappeared.
Having standard smartcard interface will enable many users to have
more secure environment,
2012 Jan 20
1
Donation of 10 ePass2003 to the OpenSSH project
Dear all,
There were a lot of discussions about smartcards and tokens, and we
would like to make a simple offer: donate to each OpenSSH developer an
ePass2003.
The ePass2003 relies on one single chip and the most advanced OpenSC
token available to date. It is also the cheapest token of all times.
Read a description here:
http://www.gooze.eu/epass-2003
Documentation:
2006 Sep 05
4
Ferret 0.10.2 - Index#search_each() and :num_docs
Hi,
I seem to be having trouble getting more than 10 hits from
Index#search_each since upgrading to 0.10.2 (ie, this was working in
0.9.4). Maybe a bug, as the #search_each doesn''t seem to use the options
parameter any more ?
Thanks,
Neville
===========================================
require ''rubygems''
require ''ferret''
p Ferret::VERSION
idx =