cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add a compile option so that identd will send encrypted cookies out rather

Browse Source 
than usernames.  This makes it much more difficult for somebody to "frame"
one of your users.

ie: instead of people getting:
   connect from peter@spinner.DIALix.COM
in their syslogs, they will get this instead:
   connect from [W+rNvCy5FuPV4xEj8thdXIlfD9qNIbzB]@spinner.DIALix.COM

The remote site will have to send it to you to decode it.  When you are
given one of these cookies, you can know for sure it is not faked, and you
don't have to trust the word of the remote sysadmin when arranging your
local lame hacker-type user to meet with an unfortunate incident :-).

This feature is documented in the man pages.

Also, fix an apparent bug in the code that deals with this, but it might
be a feature of the version of libdes we have on FreeBSD.

Requested by: markm (a fair while ago)
This commit is contained in:
Peter Wemm 1996-11-05 18:23:42 +00:00
parent 1f1c3ef553
commit 82e68e552b
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=4305
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
security/pidentd/Makefile
View File

@ -3,7 +3,7 @@
# Date created: 19 Oct 1994
# Whom: torstenb
#
# $Id: Makefile,v 1.15 1996/09/14 23:22:04 torstenb Exp $
# $Id: Makefile,v 1.16 1996/10/31 00:13:02 ache Exp $
#
DISTNAME= pidentd-2.7.1
@ -16,6 +16,17 @@ MAINTAINER= torstenb@FreeBSD.ORG
ALL_TARGET= freebsd
MAKE_ENV= REALPREFIX=${PREFIX}
# Uncomment to activate the use of verifiable "cookies". The idea is to be
# able to detect fake "logs" intended to get your innocent users in trouble.
# Naturally, since it uses libdes, you must have the "secure" dist installed.
#USE_DES= true
.if defined(USE_DES)
ADD_GDEFS= -DINCLUDE_CRYPT
ADD_GLIBS= -ldes
MAKE_ENV+= ADD_GDEFS="${ADD_GDEFS}" ADD_GLIBS="${ADD_GLIBS}"
.endif
.if !defined(NOMANCOMPRESS)
post-install:
gzip -9nf ${PREFIX}/man/man8/identd.8