Re: Expect how to protect password while telnet
From: Don Libes (libes_at_nist.gov)
Date: 02/11/04
- Previous message: Peter G. Baum: "ANNOUNCE: Gnocl 0.5.15"
- In reply to: Darren New: "Re: Expect how to protect password while telnet"
- Next in thread: Ajay: "Re: Expect how to protect password while telnet"
- Reply: Ajay: "Re: Expect how to protect password while telnet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: 11 Feb 2004 15:04:04 -0500
Darren New <dnew@san.rr.com> writes:
> Bruce Hartweg wrote:
> >> 2) In the script i have to expose password. How to amke it secure
> >> secure it ?
> >> Any help will be appreciated.
> >
> > you can't. If you expose the password it is NOT secure.
>
> Or, to put it another way, any password the computer can figure out on
> its own is one that a human looking at everything on the computer can
> follow the same steps to figure out. So it depends on what threats
> you're trying to guard against. If someone takes the disk out and sticks
> it in a different computer, they can ignore any account-level
> permissions and decode what's on the disk. If you're not worried about
> that, just make a separate account whose login only you know, and give
> only that account permission to see the expect script.
>
> But in general, there's no way to make a computer do something without
> human intervention that a sufficiently motivated human couldn't do if
> they got their hands on the computer. (And I'd love to hear if I'm
> wrong. ;-)
Glenn mentioned ssh - and that is good if it's a login password (and
you have ssh on both sides of the connection).
A couple solutions to the more general case (i.e., non-login apps) can
be found here:
http://expect.nist.gov/doc/bgpasswd.pdf
Don
- Previous message: Peter G. Baum: "ANNOUNCE: Gnocl 0.5.15"
- In reply to: Darren New: "Re: Expect how to protect password while telnet"
- Next in thread: Ajay: "Re: Expect how to protect password while telnet"
- Reply: Ajay: "Re: Expect how to protect password while telnet"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
