Identity Checking
"Aidan Whitehall" <[email protected]> Sat, 20 Sep 2003 11:11:47 +0100
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <[email protected]> |
I wanted to implement identity checking in Zebedee (testing it here using 2 Windows XP boxes), but am struggling. Telnetting to the remote machine works fine without identity checking enabled, but as soon "checkidfile" is added to the server's config file, trying to telnet to it again appears to time out. Below are the server and client config files, together with the client's log file (curiously, a log file is never generated on the server, even though it's specified). FYI, Zebedee is installed as a Windows service on the server and is started on the client by double-clicking the file "client.zbd". Then, from the command prompt on the client, I entered "telnet localhost 38000". Thanks if you can help! BTW, does the Archive exist / work? This page throws an error http://sourceforge.net/mailarchive/forum.php?forum=zebedee-talk server.zbd ================== verbosity 4 detached true server true ipmode both compression zlib:9 # Allow maximum zlib compression keylength 256 # Allow keys up to 256 bits keylifetime 36000 # Shared keys last 10 hours maxbufsize 16383 # Allow maximum possible buffer size logfile './server.log' keygenlevel 2 # Generate maximum strength private keys checkidfile './clients.id' redirect none target localhost:telnet/tcp,ftp/tcp target localhost clients.id ================== 90c20e9098d7317dca18be1aeb425608978735d1 clientname client.zbd ================== verbosity 3 detached false server false ipmode both compression zlib:9 # Allow maximum zlib compression keylength 256 # Allow keys up to 256 bits keylifetime 36000 # Shared keys last 10 hours maxbufsize 16383 # Allow maximum possible buffer size logfile './server.log' keygenlevel 2 # Generate maximum strength private keys include './myclient.key' tunnel 38000:remhost:telnet myclient.key =================== privatekey "40dddb5e73456ffb09f9194ba9ced109db08edff" logfile from client =================== zebedee(5512/3128): reading config file './myclient.key' at level 2 zebedee(5512/3128): client listener routine entered zebedee(5512/3128): creating TCP-mode local listener socket for port 38000 zebedee(5512/3128): Listening on local port 38000 zebedee(5512/3128): creating UDP-mode local listener socket for port 38000 zebedee(5512/3128): Listening on local port 38000 zebedee(5512/3128): listening for client UDP data zebedee(5512/3128): accepted connection from 127.0.0.1 zebedee(5512/5352): client routine entered zebedee(5512/5352): client on local port 38000 tunnels to target remhost:23 zebedee(5512/5352): making connection to remhost:11965 zebedee(5512/5352): connected to remhost:11965 zebedee(5512/5352): validating server IP address zebedee(5512/5352): requesting protocol version 0x201 zebedee(5512/5352): accepted protocol version 0x201 zebedee(5512/5352): requesting TCP mode zebedee(5512/5352): requesting buffer size 16383 zebedee(5512/5352): requesting compression level 0x9 zebedee(5512/5352): requesting redirection to port 23 zebedee(5512/5352): requesting key length 256 zebedee(5512/5352): requesting key reuse token 0xffffffff zebedee(5512/5352): sending client nonce 94b5... zebedee(5512/5352): requesting target address 00000000 zebedee(5512/5352): accepted TCP mode zebedee(5512/5352): accepted buffer size 16383 zebedee(5512/5352): accepted compression level 0x9 zebedee(5512/5352): redirection request accepted zebedee(5512/5352): accepted key length 256 zebedee(5512/5352): accepted key reuse token 0x28fc6375 zebedee(5512/5352): received server nonce ec1b... zebedee(5512/5352): reading DH generator zebedee(5512/5352): accepted generator '' zebedee(5512/5352): reading DH modulus zebedee(5512/5352): accepted modulus '' zebedee(5512/5352): reading server DH key zebedee(5512/5352): accepted server DH key 'e81e3546b4e12c9a8c9c4239b2961cc5ced2155293f6e3540682c341a87c528aeedd87d a7617c3d5ef4bd6caf9fe71b2fabf9db09b940eebfe12f742fa791774c85ea9b885e8514 f36ed99a34bf46cd91d80aa54cdaf955826b19259ebb48428300b870198be89904aeb692 b43b1946bcfa04530ac1fc21d12b5bf561f52aa0d' zebedee(5512/5352): generating private key zebedee(5512/5352): private key generated zebedee(5512/5352): generating public DH key zebedee(5512/5352): public DH key is 'de7e3ccf69f8337b74fe3476a6ec8be427739e64a9850759a1ffeab6f50120956fabee1 3b366deaf662896f4f958dae36579e2eb758869bc394d7a0382e61cf61f8a26346020c7c fb90839bb2f05f9447d0ef49f50e0eb72e1ec425cdebf953ab1c2ad86aa3b1ad9202129a 349a888695e0941fbfa0d59560a99df4af5ae1f1a' zebedee(5512/5352): sending public DH key zebedee(5512/5352): sent public DH key zebedee(5512/5352): generating shared secret key zebedee(5512/5352): shared key ends '...1297' zebedee(5512/5352): session key ends '...1a19' zebedee(5512/5352): initialising encryption state zebedee(5512/5352): reading challenge from server zebedee(5512/5352): ERROR: failed to read challenge from server -- Aidan Whitehall <mailto:[email protected]> Macromedia ColdFusion Developer Fairbanks Environmental Ltd +44 (0)1695 51775 Queen's Awards Winner 2003 <http://www.fairbanks.co.uk/go/awards> ________________________________________________________________________ This e-mail has been scanned for all viruses by Star Internet. The service is powered by MessageLabs. For more information on a proactive anti-virus service working around the clock, around the globe, visit: http://www.star.net.uk ________________________________________________________________________ ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf