FirewallWizards
[Top] [All Lists]

Re: [fw-wiz] identd, revisited

To: firewall-wizards@listserv.cybertrust.com
Subject: Re: [fw-wiz] identd, revisited
From: "H. Morrow Long" <morrow.long@yale.edu>
Date: Fri, 2 Feb 2007 13:45:46 -0500
Delivered-to: sp-com-lists@consult.net
Delivered-to: fwwizards-list2@consult.net
Delivered-to: firewall-wizards@listserv.cybertrust.com
In-reply-to: <20070202134116.93B54E158@jimsun.linxnet.com>
List-archive: <https://listserv.icsalabs.com/pipermail/firewall-wizards>
List-help: <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=help>
List-id: Firewall Wizards Security Mailing List <firewall-wizards.listserv.icsalabs.com>
List-post: <mailto:firewall-wizards@listserv.icsalabs.com>
List-subscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=subscribe>
List-unsubscribe: <https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards>, <mailto:firewall-wizards-request@listserv.icsalabs.com?subject=unsubscribe>
References: <20070202134116.93B54E158@jimsun.linxnet.com>
Reply-to: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>
Sender: firewall-wizards-bounces@listserv.icsalabs.com
Here is a good identd which you can run out of inetd or xinetd.

Call it /usr/sbin/ident or whatever you want and have it run out
of the appropriate inetd.conf or xinetd configuration file.  In many
cases most remove service checking in with an identd/auth server
won't even match up the socket pair with the port #s return so that
you could eliminate the read and just return '0, 0' but some services
might check.  Change 'root' to whatever userid you want to return...

#!/bin/sh
read a b
echo $a $b ': USERID : UNIX :root'


- H. Morrow Long, CISSP, CISM, CEH
  University Information Security Officer
  Director -- Information Security Office
  Yale University, ITS


ArkanoiD <ark@eltex.net> wrote:

[snip]

But what's really wrong with identd?
[snip]

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
<Prev in Thread] Current Thread [Next in Thread>