Identity Checking

"Aidan Whitehall" <[email protected]> Sat, 20 Sep 2003 11:11:47 +0100
Newsgroups gmane.comp.security.zebedee.general
Message-ID <[email protected]>
I wanted to implement identity checking in Zebedee (testing it here
using 2 Windows XP boxes), but am struggling. Telnetting to the remote
machine works fine without identity checking enabled, but as soon
"checkidfile" is added to the server's config file, trying to telnet to
it again appears to time out.

Below are the server and client config files, together with the client's
log file (curiously, a log file is never generated on the server, even
though it's specified).

FYI, Zebedee is installed as a Windows service on the server and is
started on the client by double-clicking the file "client.zbd". Then,
from the command prompt on the client, I entered "telnet localhost
38000".

Thanks if you can help!

BTW, does the Archive exist / work? This page throws an error
http://sourceforge.net/mailarchive/forum.php?forum=zebedee-talk


server.zbd
==================
verbosity 4
detached true
server true
ipmode both
compression zlib:9	# Allow maximum zlib compression
keylength 256		# Allow keys up to 256 bits
keylifetime 36000	# Shared keys last 10 hours
maxbufsize 16383	# Allow maximum possible buffer size
logfile './server.log'
keygenlevel 2	# Generate maximum strength private keys
checkidfile './clients.id'
redirect none
target localhost:telnet/tcp,ftp/tcp
target localhost

clients.id
==================
90c20e9098d7317dca18be1aeb425608978735d1 clientname



client.zbd
==================
verbosity 3
detached false
server false
ipmode both
compression zlib:9	# Allow maximum zlib compression
keylength 256		# Allow keys up to 256 bits
keylifetime 36000	# Shared keys last 10 hours
maxbufsize 16383	# Allow maximum possible buffer size
logfile './server.log'
keygenlevel 2	# Generate maximum strength private keys
include './myclient.key'
tunnel 38000:remhost:telnet

myclient.key
===================
privatekey "40dddb5e73456ffb09f9194ba9ced109db08edff"

logfile from client
===================
zebedee(5512/3128):   reading config file './myclient.key' at level 2
zebedee(5512/3128):    client listener routine entered
zebedee(5512/3128):    creating TCP-mode local listener socket for port
38000
zebedee(5512/3128):  Listening on local port 38000
zebedee(5512/3128):    creating UDP-mode local listener socket for port
38000
zebedee(5512/3128):  Listening on local port 38000
zebedee(5512/3128):  listening for client UDP data
zebedee(5512/3128):  accepted connection from 127.0.0.1
zebedee(5512/5352):    client routine entered
zebedee(5512/5352):    client on local port 38000 tunnels to target
remhost:23
zebedee(5512/5352):    making connection to remhost:11965
zebedee(5512/5352):    connected to remhost:11965
zebedee(5512/5352):    validating server IP address
zebedee(5512/5352):    requesting protocol version 0x201
zebedee(5512/5352):    accepted protocol version 0x201
zebedee(5512/5352):    requesting TCP mode
zebedee(5512/5352):    requesting buffer size 16383
zebedee(5512/5352):    requesting compression level 0x9
zebedee(5512/5352):    requesting redirection to port 23
zebedee(5512/5352):    requesting key length 256
zebedee(5512/5352):    requesting key reuse token 0xffffffff
zebedee(5512/5352):    sending client nonce 94b5...
zebedee(5512/5352):    requesting target address 00000000
zebedee(5512/5352):    accepted TCP mode
zebedee(5512/5352):    accepted buffer size 16383
zebedee(5512/5352):    accepted compression level 0x9
zebedee(5512/5352):    redirection request accepted
zebedee(5512/5352):    accepted key length 256
zebedee(5512/5352):    accepted key reuse token 0x28fc6375
zebedee(5512/5352):    received server nonce ec1b...
zebedee(5512/5352):    reading DH generator
zebedee(5512/5352):    accepted generator ''
zebedee(5512/5352):    reading DH modulus
zebedee(5512/5352):    accepted modulus ''
zebedee(5512/5352):    reading server DH key
zebedee(5512/5352):    accepted server DH key
'e81e3546b4e12c9a8c9c4239b2961cc5ced2155293f6e3540682c341a87c528aeedd87d
a7617c3d5ef4bd6caf9fe71b2fabf9db09b940eebfe12f742fa791774c85ea9b885e8514
f36ed99a34bf46cd91d80aa54cdaf955826b19259ebb48428300b870198be89904aeb692
b43b1946bcfa04530ac1fc21d12b5bf561f52aa0d'
zebedee(5512/5352):    generating private key
zebedee(5512/5352):    private key generated
zebedee(5512/5352):    generating public DH key
zebedee(5512/5352):    public DH key is
'de7e3ccf69f8337b74fe3476a6ec8be427739e64a9850759a1ffeab6f50120956fabee1
3b366deaf662896f4f958dae36579e2eb758869bc394d7a0382e61cf61f8a26346020c7c
fb90839bb2f05f9447d0ef49f50e0eb72e1ec425cdebf953ab1c2ad86aa3b1ad9202129a
349a888695e0941fbfa0d59560a99df4af5ae1f1a'
zebedee(5512/5352):    sending public DH key
zebedee(5512/5352):    sent public DH key
zebedee(5512/5352):    generating shared secret key
zebedee(5512/5352):    shared key ends '...1297'
zebedee(5512/5352):    session key ends '...1a19'
zebedee(5512/5352):    initialising encryption state
zebedee(5512/5352):    reading challenge from server
zebedee(5512/5352): ERROR: failed to read challenge from server



-- 
Aidan Whitehall <mailto:[email protected]>
Macromedia ColdFusion Developer
Fairbanks Environmental Ltd  +44 (0)1695 51775
Queen's Awards Winner 2003 <http://www.fairbanks.co.uk/go/awards>

________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf