Kerberized ftp client for Mac/Win?

Kerberized ftp client for Mac/Win?

Post by Enno Vanderme » Tue, 12 Sep 1995 04:00:00



Has anyone heard of a Kerberized (or otherwise secure/encrypted) ftp
client for Mac or Windows?  CNS from cygnus includes a telnet client for
each, but I have regular file transfers taking place -- I don't need those
passwords all over the place.  Any ideas?

Thanks.

Enno Vandermeer

 
 
 

Kerberized ftp client for Mac/Win?

Post by David D Kilz » Fri, 15 Sep 1995 04:00:00



>Has anyone heard of a Kerberized (or otherwise secure/encrypted) ftp
>client for Mac or Windows?  CNS from cygnus includes a telnet client for
>each, but I have regular file transfers taking place -- I don't need those
>passwords all over the place.  Any ideas?

AFAIK, the standards people haven't decided exactly how this will be
handled, and thus no one has implemented Kerberized FTP clients yet.
Telnet/d was just standardized recently, which is why you're now seeing
Kerberized telnet programs.

At least that is my understand of the situation.

Dave
--
David D. Kilzer              \ ``My goal is to carry the Macintosh torch and

Computer Engineer 5          \                 Guy Kawasaki
Iowa State University, Ames  /       Recently-appointed Apple Fellow

 
 
 

Kerberized ftp client for Mac/Win?

Post by Jacques Distl » Fri, 15 Sep 1995 04:00:00




>Has anyone heard of a Kerberized (or otherwise secure/encrypted) ftp
>client for Mac or Windows?  CNS from cygnus includes a telnet client for
>each, but I have regular file transfers taking place -- I don't need those
>passwords all over the place.  Any ideas?

If the objective is simply authentication without cleartext password, you
might look into the S/Key one-time password system instead of kerberos.
Fetch 3.0b6, the ftp client for the mac, handles  S/Key authentication
automatically. And there are several s/keyified ftpd's around.

Jacques Distler

 
 
 

Kerberized ftp client for Mac/Win?

Post by Jonathan Kame » Sat, 16 Sep 1995 04:00:00



|> AFAIK, the standards people haven't decided exactly how this will be
|> handled, and thus no one has implemented Kerberized FTP clients yet.
|> Telnet/d was just standardized recently, which is why you're now seeing
|> Kerberized telnet programs.

That is not true.  OpenVision's Kerberos product, OpenV*Secure, has included a
Kerberos-capable FTP client and server for several releases.  We implemented a
Kerberos GSS-API library which is tracking the Kerberos GSS-API standard as it
evolves, and we implemented a GSS-API FTP client and server, linked against
the Kerberos GSS-API library, which is tracking the GSS-API FTP standard as it
evolves.  I use our FTP client and server regularly to securely transfer files
between machines at work and my machine at home.

I don't know if anyone else has done this work.

 
 
 

1. Kerberized Linux client has no access on Solaris NFS Server

Hi,

I've already read several newsgroup entries (especially
http://groups.google.at/groups?q=linux+solaris+nfs+kerberos&start=10&...
r=&ie=UTF-8&selm=a9877ca0.0405040030.5b665945%40posting.google.com&rnum=19)
but I cannot find a solution.

I've a Linux NFS client (automount 4.0.0) and want have access to a Solaris
NFS server (Solaris 9). I've created a principal for the NFS server and
copied the keytab to the NFS server. The automountinformation (I store the
automount tables in an LDAP directory)
is: -fstype=nfs,hard,intr,nosuid,sec=krb5i box.domain.com:/export/home/&
Kerberos works because I can logon and get a ticket for the appropriate
user.

When I logon I get the message "Could not chdir to home directory....:
Permission denied" and following entry will be added to the
/var/log/message: kernel: call_verify: server requires stronger
authentication. I see the mounted home directory but I'm not able to do cd
<homedirectory> or something else.

I read that if I use automount I don't need the root principal (regarding
security issues); is that right? I created a user (which is stored in the
directory server) in the gsscred table of the NFS server as well but it
didn't work.

Thanks for any tips!
Johannes

2. need help with paths statements

3. Kerberized NFS client for Linux?

4. quad processor P4 Linux box?

5. How to set up NFS client for Kerberized access in Solaris

6. gcc compiling problem!

7. KERBERIZED CLIENTS FOR AIX ?

8. IDEMPOTENT??

9. trouble with ftp-server on a ultrasparc ( and mac-clients )

10. FTP Problems: Linux ISP > Mac client

11. Using a Mac as CVS server, Linux and Mac clients

12. Cannot connect Linux FTP server with Win client

13. FTP on client Win XP doesn't work.