Re: How can I help ?

2000-06-13 Thread Thomas Guettler
I am in the same position. I have got some time left which I could spent in an opensource project. Nearly all things I dream of are already working. So that I don't know where to join. And Mozilla ist too big. And like Florian I am interested in security. If someone knows where to start, please

RE: How can I help ?

2000-06-13 Thread Ronny Adsetts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 snip One thing I am interested is, which ist AFAIK no implemented yet: Crossplattform userauthentication (win+unix), via LDAP. This is a great idea. I am willing to help if pointed in the right direction. I guess using PAM and Samba together with

RE: How can I help ?

2000-06-13 Thread Alexander Hvostov
Ronny and all, If you want to use LDAP, I suggest you do LDAP over SSL/TLS. The current OpenLDAP doesn't support it natively, but I believe there's a patch, and of course there's always wrappers like stunnel. Of course, if you want to use user authentication from Windows, using PAM is more or

RE: How can I help ?

2000-06-13 Thread Ryan White
As I recall after windows 95 the passwords are sent over the line encrypted. The encryption might be weak but they are not clear text anymore. There is a switch in SMB to allow encrypted passwords. This is ON by default in debian (I believe) -Ryan On Tue, 13 Jun 2000, Alexander Hvostov wrote:

Re: How can I help ?

2000-06-13 Thread Michael Vogt
On Tue, Jun 13, 2000 at 03:54:25PM +0200, Thomas Guettler wrote: I am in the same position. I have got some time left which I could spent in an opensource project. Nearly all things I dream of are already working. So that I don't know where to join. And Mozilla ist too big. And like Florian

RE: How can I help ?

2000-06-13 Thread Alexander Hvostov
Ryan, It may be encrypted, but it isn't public-key encrypted or anything like that. Anyone with a packet analyzer (ngrep will do it) can just send the encrypted password to the server, so it's just as good as having the cleartext password. Regards, Alex. --- PGP/GPG Fingerprint: EFD1 AC6C

Re: How can I help ?

2000-06-13 Thread Alexander Hvostov
Michael, I have a better idea: an integrated 'user' command, which uses plugins to access the actual database server (like PAM, but for writing to the database rather than reading from it), and performs any of several functions. Some examples: # user add joe Enter password: Repeat password: User