Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Experience varies directly with equipment ruined.


devel / comp.protocols.kerberos / Re: help with OTP

SubjectAuthor
o Re: help with OTPMatt Zagrabelny

1
Re: help with OTP

<mailman.3.1704467637.2322.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=454&group=comp.protocols.kerberos#454

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: mzagr...@d.umn.edu (Matt Zagrabelny)
Newsgroups: comp.protocols.kerberos
Subject: Re: help with OTP
Date: Fri, 5 Jan 2024 09:13:38 -0600
Organization: TNet Consulting
Lines: 35
Message-ID: <mailman.3.1704467637.2322.kerberos@mit.edu>
References: <CAOLfK3WVppnk3eouiLTxhiR5gXQcCVd7K5xr_erP=y_RkeVpPw@mail.gmail.com>
<202304242225.33OMPJdw026540@hedwig.cmf.nrl.navy.mil>
<CAOLfK3XZF95-XoaW8y8cMrMETpWQNV-=EEkMyreo18WXH5M3sg@mail.gmail.com>
<CAJhaRZ+wc0N_YX06jdsh8iHTSn1dJoH3bn6q6Mm0V35h-8FARg@mail.gmail.com>
<CAOLfK3Xs9X25-jY+GjXqmNEOYbSNSVMXdBojX=k28FWqenWG+A@mail.gmail.com>
<CAJhaRZJP+Cz0RkSyOaWmjH5UHjye43k7B9G=dRechpN3Ad4qXg@mail.gmail.com>
<CAOLfK3VOZSNFhpkSKy5XsaA2mFUDVCGdjjZdna_O8M2RaAZPyw@mail.gmail.com>
<202304260001.33Q01xYH024064@hedwig.cmf.nrl.navy.mil>
<CAOLfK3X+3LSdOfA0vpDDiPi3RC7GUb73+jZTYje7sjDfQVu96g@mail.gmail.com>
<202304261629.33QGTlJ8015728@hedwig.cmf.nrl.navy.mil>
<CAOLfK3XRaYoT+NgbjDCbEaKow36QpTjrFrjGO-jGW96=7z9u_A@mail.gmail.com>
<CAOLfK3U9K+htja6eUzuwisSOQ6SnJSz3bDejaLvKE8b8o8rGZQ@mail.gmail.com>
<202401051502.405F2RA8011173@hedwig.cmf.nrl.navy.mil>
<CAOLfK3VTUnTzwou9Ze3TDU5W0bPvq6_gcsU9HQFX9d49VFftpw@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="19305"; mail-complaints-to="newsmaster@tnetconsulting.net"
Cc: kerberos <kerberos@mit.edu>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=rHXOQrIk;
dkim=pass (2048-bit key,
unprotected) header.d=d.umn.edu header.i=@d.umn.edu header.a=rsa-sha256
header.s=google header.b=Jzb/k/WN
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=NodWPFLZlRi3zrGdeU4jdK8cCHobq8iQK0XMPiFpxG6+D9JN8Hp4nG/1+NRSmWJP+WZSozqr7B2zaSKEL5CtUpBlOjb1cBnUrwUDsdX4iuJ2jcH4vPpaqJ+vOTxqSmZDVGuIm4uhFRACKyxB8ZQw2Cpb73nVXrOA1n8No+It2DUxQfFBFkkGXmaAVQ4W49IAfK88r6QQeB4LjYeBeyob+oYSICncJfd7T7RW/JfFTSHh9/Bz2z8pu6cxkRPScG7hdtBkL55YQ8UFKfEMN0s0VNaO4ZX+/X4IDyWEm8PzVb4PubozhLi+8EPR/zpaFLS+lv/Zbt23EJB6zNw9hlJzcQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=U4gd8pV522ZJtJ4WTlQZMT4gTZPV0aqKuvY3vXTIhFw=;
b=eR6vG3z552FDaRtBu2jT1DXFMj9YTbnDJQZGTpr9VXWrq5WKW71DcyYo2CP+zFzV882ieVvNCAR6ph/GykrmXu4jbIlgEUR0Z1zmmfYIHcObmfixlG8y8vWIPhw4nJwUICOBnf7NAa+gRuuKmO5e19taCw1eZ+JUP74d11KsCOrnGbFRAgt7HRHxhk9fo5zqtowYNXS64yYRYwrMOXkjEMzx2yfSp1/LARY66pD+iyqRdOafEephOPVJ7uYKzrSzc4FUc9LqJcGwH0NQhKg9cahf1Z2KBRGdYwAaRXPgd1W46yNth+hLTnHT3HftjFia4wdmS+ZeEA0/Dld8vzR7Wg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
134.84.196.206) smtp.rcpttodomain=mit.edu smtp.mailfrom=d.umn.edu; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=d.umn.edu; dkim=pass
(signature was verified) header.d=d.umn.edu; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=U4gd8pV522ZJtJ4WTlQZMT4gTZPV0aqKuvY3vXTIhFw=;
b=rHXOQrIkfZ5xxPMyythQ93QkwxhoIyXrv/NRXb7b9jY8y45n7UgNmE1d/kR10mRbgf4CI21+hffDPq5EO2BKjVAtw8NfnNudKSrvS9MwOwjvds/YDnBR866G6/sM3SGedPw4GDYZI0Rz9QtS7wQENkOTGAts1At9KKrT62aQ5dc=
Authentication-Results: spf=pass (sender IP is 134.84.196.206)
smtp.mailfrom=d.umn.edu; dkim=pass (signature was verified)
header.d=d.umn.edu;dmarc=pass action=none header.from=d.umn.edu;
Received-SPF: Pass (protection.outlook.com: domain of d.umn.edu designates
134.84.196.206 as permitted sender) receiver=protection.outlook.com;
client-ip=134.84.196.206; helo=mta-p6.oit.umn.edu; pr=C
X-Virus-Scanned: amavisd-new at umn.edu
DMARC-Filter: OpenDMARC Filter v1.3.2 mta-p6.oit.umn.edu 4T66Rg20spz9vYTg
DKIM-Filter: OpenDKIM Filter v2.11.0 mta-p6.oit.umn.edu 4T66Rg20spz9vYTg
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=d.umn.edu; s=google; t=1704467630; x=1705072430; darn=mit.edu;
h=cc:to:subject:message-id:date:from:in-reply-to:references
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=U4gd8pV522ZJtJ4WTlQZMT4gTZPV0aqKuvY3vXTIhFw=;
b=Jzb/k/WN6ki35aDuF9CjIb0xvUSF0o6500ZvE4R7VwXmME09hHjJbtm+WPbFULiLS5
Qo/Nv7HUT6kuWFz79SCBGfrnDqC2Ii5HWeNlqEj9+ZN9OCLXk4DJ8X/gilLF+nT/NuWg
RjdBrqCLBiuuO9bSr31v3UiXhvfKCPusgoIRGS1hG20DR8BaCNnplYf3giv2wrjKmdOd
CYN1gZ5FvhXgO9Tb93AJsbIJmRDcijsboIGodHKruovyqqPBjPnfwrBx3P5S83jsWVpP
m5qtBuJzk84kxTW1FFr9CV6q3JtJ1WozaBSiJPoAwabj/C/9/5eB6sjq4NlDlu2uFbCE
I05g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1704467630; x=1705072430;
h=cc:to:subject:message-id:date:from:in-reply-to:references
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=U4gd8pV522ZJtJ4WTlQZMT4gTZPV0aqKuvY3vXTIhFw=;
b=FvS3+Ib+UjuiWTSnG2VeCp10qPq+Vs4CpJ5lD3KwuinUXH4Z4C7W7C8Qudyjppwwd/
McZZP5iotRLtxB8d1V+VVOUqR/0fa5FU61nC6Oa5fabqhwQ/Fi7drViHN8iySPgs8NmM
CymwZymizafpJ9kFIwrpuUnAwo2UFSBB+HQoCucU4Vtbe+/sW/zB4i1TX/v4Y5JR1RLi
f2f2qj6WF0N9bHUaRF78CHwTKF2gjPMHscUkKyATJEsp9Oqo3HBcu1EE/wk/Pm3+f4Kq
Kmacj7O5UUU7LiDjQQktxifHhbUvy0LOVu4RXAu54SKlH/2EtXQsSs6xl1mul4AWNHHt
/raA==
X-Gm-Message-State: AOJu0YwYplv0gFnEIp0iaRY3SkIBuwBU/K0mkClyg1xrhAKLzQDzk5pU
FfF//OMdufirE+nJIOQHFkWZ7H6SW+Noihc+3I5MBcGUCYNpNdoWbfEG+4n9gjtX6BCgoBsJhk8
S/iwZLfdhLsDMcG07sccpE33sPMiNlXoJ0WeERbP/S68=
X-Received: by 2002:a17:902:ea0b:b0:1d4:7628:381c with SMTP id
s11-20020a170902ea0b00b001d47628381cmr2228125plg.3.1704467630127;
Fri, 05 Jan 2024 07:13:50 -0800 (PST)
X-Google-Smtp-Source: AGHT+IGS0gclPkOvm+kXCxvlPDjhOpK4LMS9gk1msRtv9+QeOYYV9hek+5qzSpSSdH6ezecyf4J7NigWJnBPX9+M5Y8=
X-Received: by 2002:a17:902:ea0b:b0:1d4:7628:381c with SMTP id
s11-20020a170902ea0b00b001d47628381cmr2228118plg.3.1704467629821; Fri, 05 Jan
2024 07:13:49 -0800 (PST)
In-Reply-To: <202401051502.405F2RA8011173@hedwig.cmf.nrl.navy.mil>
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SA2PEPF00001506:EE_|CH0PR01MB7089:EE_
X-MS-Office365-Filtering-Correlation-Id: f15a384c-60a5-4c0d-d82f-08dc0e00ed2c
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:134.84.196.206; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:mta-p6.oit.umn.edu; PTR:mta-p6.oit.umn.edu; CAT:NONE;
SFS:(13230031)(4636009)(376002)(346002)(136003)(396003)(39860400002)(451199024)(48200799006)(61400799012)(64100799003)(83380400001)(6666004)(4326008)(7116003)(6862004)(33964004)(53546011)(498600001)(336012)(26005)(3480700007)(75432002)(7596003)(316002)(70586007)(68406010)(356005)(8676002)(786003)(42186006)(86362001)(2906002)(55446002)(9686003)(5660300002);
DIR:OUT; SFP:1102;
X-ExternalRecipientOutboundConnectors: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Jan 2024 15:13:51.9977 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: f15a384c-60a5-4c0d-d82f-08dc0e00ed2c
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: SA2PEPF00001506.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR01MB7089
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <CAOLfK3VTUnTzwou9Ze3TDU5W0bPvq6_gcsU9HQFX9d49VFftpw@mail.gmail.com>
X-Mailman-Original-References: <CAOLfK3WVppnk3eouiLTxhiR5gXQcCVd7K5xr_erP=y_RkeVpPw@mail.gmail.com>
<202304242225.33OMPJdw026540@hedwig.cmf.nrl.navy.mil>
<CAOLfK3XZF95-XoaW8y8cMrMETpWQNV-=EEkMyreo18WXH5M3sg@mail.gmail.com>
<CAJhaRZ+wc0N_YX06jdsh8iHTSn1dJoH3bn6q6Mm0V35h-8FARg@mail.gmail.com>
<CAOLfK3Xs9X25-jY+GjXqmNEOYbSNSVMXdBojX=k28FWqenWG+A@mail.gmail.com>
<CAJhaRZJP+Cz0RkSyOaWmjH5UHjye43k7B9G=dRechpN3Ad4qXg@mail.gmail.com>
<CAOLfK3VOZSNFhpkSKy5XsaA2mFUDVCGdjjZdna_O8M2RaAZPyw@mail.gmail.com>
<202304260001.33Q01xYH024064@hedwig.cmf.nrl.navy.mil>
<CAOLfK3X+3LSdOfA0vpDDiPi3RC7GUb73+jZTYje7sjDfQVu96g@mail.gmail.com>
<202304261629.33QGTlJ8015728@hedwig.cmf.nrl.navy.mil>
<CAOLfK3XRaYoT+NgbjDCbEaKow36QpTjrFrjGO-jGW96=7z9u_A@mail.gmail.com>
<CAOLfK3U9K+htja6eUzuwisSOQ6SnJSz3bDejaLvKE8b8o8rGZQ@mail.gmail.com>
<202401051502.405F2RA8011173@hedwig.cmf.nrl.navy.mil>
 by: Matt Zagrabelny - Fri, 5 Jan 2024 15:13 UTC

Hi Ken!

Thanks for the reply and the comments.

On Fri, Jan 5, 2024 at 9:02 AM Ken Hornstein <kenh@cmf.nrl.navy.mil> wrote:

> >Krb5 devs,
>
> I'm not an official MIT krb5 developer, so I can't speak for them. But
> in my experience things like this tend to be the most successful when they
> are submitted as pull requests. That was my plan, eventually.
>
> >Any thoughts about extending kinit to natively perform the two step
> process
> >in the alias above? (And also have an option in /etc/krb5.conf so that it
> >is "on" by default?)
>
> I think this COULD be useful, but it would be more complicated. Also,
> were you thinking of just changing the function of the kinit command
> or ANYTHING that does the same things as kinit?

The former. :)

No urgency from my side as the alias I use is sufficient.

Thank you (devs) for the software and support! As always, you are very
appreciated.

Cheers,

-m

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor