Fw: Identity Checking

> Aidan,
> 
> Did you put a carriage return after the lines in your clients.id and
> myclient.id files?  I forgot that once and then zebedee doesn't read the
> last line, hence no valid ID
> 
> Yves
> 
> ----- Original Message ----- 
> From: "Aidan Whitehall" <[email protected]>
> To: <[email protected]>
> Sent: Saturday, September 20, 2003 12:11 PM
> Subject: [Zebedee-talk] Identity Checking
> 
> 
> I wanted to implement identity checking in Zebedee (testing it here
> using 2 Windows XP boxes), but am struggling. Telnetting to the remote
> machine works fine without identity checking enabled, but as soon
> "checkidfile" is added to the server's config file, trying to telnet to
> it again appears to time out.
> 
> Below are the server and client config files, together with the client's
> log file (curiously, a log file is never generated on the server, even
> though it's specified).
> 
> FYI, Zebedee is installed as a Windows service on the server and is
> started on the client by double-clicking the file "client.zbd". Then,
> from the command prompt on the client, I entered "telnet localhost
> 38000".
> 
> Thanks if you can help!
> 
> BTW, does the Archive exist / work? This page throws an error
> http://sourceforge.net/mailarchive/forum.php?forum=zebedee-talk
> 
> 
> server.zbd
> ==================
> verbosity 4
> detached true
> server true
> ipmode both
> compression zlib:9 # Allow maximum zlib compression
> keylength 256 # Allow keys up to 256 bits
> keylifetime 36000 # Shared keys last 10 hours
> maxbufsize 16383 # Allow maximum possible buffer size
> logfile './server.log'
> keygenlevel 2 # Generate maximum strength private keys
> checkidfile './clients.id'
> redirect none
> target localhost:telnet/tcp,ftp/tcp
> target localhost
> 
> clients.id
> ==================
> 90c20e9098d7317dca18be1aeb425608978735d1 clientname
> 
> 
> 
> client.zbd
> ==================
> verbosity 3
> detached false
> server false
> ipmode both
> compression zlib:9 # Allow maximum zlib compression
> keylength 256 # Allow keys up to 256 bits
> keylifetime 36000 # Shared keys last 10 hours
> maxbufsize 16383 # Allow maximum possible buffer size
> logfile './server.log'
> keygenlevel 2 # Generate maximum strength private keys
> include './myclient.key'
> tunnel 38000:remhost:telnet
> 
> myclient.key
> ===================
> privatekey "40dddb5e73456ffb09f9194ba9ced109db08edff"
> 
> logfile from client
> ===================
> zebedee(5512/3128):   reading config file './myclient.key' at level 2
> zebedee(5512/3128):    client listener routine entered
> zebedee(5512/3128):    creating TCP-mode local listener socket for port
> 38000
> zebedee(5512/3128):  Listening on local port 38000
> zebedee(5512/3128):    creating UDP-mode local listener socket for port
> 38000
> zebedee(5512/3128):  Listening on local port 38000
> zebedee(5512/3128):  listening for client UDP data
> zebedee(5512/3128):  accepted connection from 127.0.0.1
> zebedee(5512/5352):    client routine entered
> zebedee(5512/5352):    client on local port 38000 tunnels to target
> remhost:23
> zebedee(5512/5352):    making connection to remhost:11965
> zebedee(5512/5352):    connected to remhost:11965
> zebedee(5512/5352):    validating server IP address
> zebedee(5512/5352):    requesting protocol version 0x201
> zebedee(5512/5352):    accepted protocol version 0x201
> zebedee(5512/5352):    requesting TCP mode
> zebedee(5512/5352):    requesting buffer size 16383
> zebedee(5512/5352):    requesting compression level 0x9
> zebedee(5512/5352):    requesting redirection to port 23
> zebedee(5512/5352):    requesting key length 256
> zebedee(5512/5352):    requesting key reuse token 0xffffffff
> zebedee(5512/5352):    sending client nonce 94b5...
> zebedee(5512/5352):    requesting target address 00000000
> zebedee(5512/5352):    accepted TCP mode
> zebedee(5512/5352):    accepted buffer size 16383
> zebedee(5512/5352):    accepted compression level 0x9
> zebedee(5512/5352):    redirection request accepted
> zebedee(5512/5352):    accepted key length 256
> zebedee(5512/5352):    accepted key reuse token 0x28fc6375
> zebedee(5512/5352):    received server nonce ec1b...
> zebedee(5512/5352):    reading DH generator
> zebedee(5512/5352):    accepted generator ''
> zebedee(5512/5352):    reading DH modulus
> zebedee(5512/5352):    accepted modulus ''
> zebedee(5512/5352):    reading server DH key
> zebedee(5512/5352):    accepted server DH key
> 'e81e3546b4e12c9a8c9c4239b2961cc5ced2155293f6e3540682c341a87c528aeedd87d
> a7617c3d5ef4bd6caf9fe71b2fabf9db09b940eebfe12f742fa791774c85ea9b885e8514
> f36ed99a34bf46cd91d80aa54cdaf955826b19259ebb48428300b870198be89904aeb692
> b43b1946bcfa04530ac1fc21d12b5bf561f52aa0d'
> zebedee(5512/5352):    generating private key
> zebedee(5512/5352):    private key generated
> zebedee(5512/5352):    generating public DH key
> zebedee(5512/5352):    public DH key is
> 'de7e3ccf69f8337b74fe3476a6ec8be427739e64a9850759a1ffeab6f50120956fabee1
> 3b366deaf662896f4f958dae36579e2eb758869bc394d7a0382e61cf61f8a26346020c7c
> fb90839bb2f05f9447d0ef49f50e0eb72e1ec425cdebf953ab1c2ad86aa3b1ad9202129a
> 349a888695e0941fbfa0d59560a99df4af5ae1f1a'
> zebedee(5512/5352):    sending public DH key
> zebedee(5512/5352):    sent public DH key
> zebedee(5512/5352):    generating shared secret key
> zebedee(5512/5352):    shared key ends '...1297'
> zebedee(5512/5352):    session key ends '...1a19'
> zebedee(5512/5352):    initialising encryption state
> zebedee(5512/5352):    reading challenge from server
> zebedee(5512/5352): ERROR: failed to read challenge from server
> 
> 
> 
> -- 
> Aidan Whitehall <mailto:[email protected]>
> Macromedia ColdFusion Developer
> Fairbanks Environmental Ltd  +44 (0)1695 51775
> Queen's Awards Winner 2003 <http://www.fairbanks.co.uk/go/awards>
> 
> ________________________________________________________________________
> This e-mail has been scanned for all viruses by Star Internet. The
> service is powered by MessageLabs. For more information on a proactive
> anti-virus service working around the clock, around the globe, visit:
> http://www.star.net.uk
> ________________________________________________________________________
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Zebedee-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/zebedee-talk
> 
> 


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf