Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
X-Originating-IP: [24.0.161.175]
From: "Karl M" <karlm30 AT hotmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Updated partial auth patch against CVS
Date: Sat, 05 May 2001 15:22:25 -0700
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <F186qfAj81EYtN3Isam00000d47@hotmail.com>
X-OriginalArrivalTime: 05 May 2001 22:22:25.0267 (UTC) FILETIME=[DC8F2430:01C0D5B1]

Hi Corinna...

Here is the same patch, combined with Carsons patch. You can apply this 
directly to 2.5.2p2. Please take a look at it for me. It gives the user the 
ability to provide partial authentication with CygWin. In particular, with 
it users can have an authentication sequence like:

publickey (if the server uid matches the logon uid) and
publickey followed by password (if the server uid is different from the 
logon uid)

this gives the security advantage of publickey authentication against 
password cracking, and gets a password to the server to make windows happy. 
And, the above example allows special administrative tasks to avoid 
passwords (for that one special user id in your life).

If anyone else wants to give it a try, let me know if you need any help.

Thanks,

...Karl

>From: "Karl M" <karlm30 AT hotmail DOT com>
>To: openssh-unix-dev AT mindrot DOT org
>CC: cygwin AT cygwin DOT com
>Subject: Re: Updated partial auth patch against CVS
>Date: Sat, 05 May 2001 14:17:22 -0700
>
>Hi Carson...
>
>Here is what I have so far. This is a patch based on 2.5.2p2 with your
>patch. So this is a patch on top of your patch. This patch allows
>
>AuthOrder2 publickey:uidmatch,publickey:password
>
>for the CygWin environment. It also highlites a couple of minor things I
>found in your patch. When you have a 2.9p1 patch I will update this.
>
>Thanks,
>
>...Karl
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com
><< diffFromCarson252p2patch.txt >>
>--
>Want to unsubscribe from this list?
>Check out: http://cygwin.com/ml/#unsubscribe-simple

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com


--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple