Article 5D571 Goodbye kerberized telnetd?

Goodbye kerberized telnetd?

by
camerabambai
from LinuxQuestions.org on (#5D571)
I have configured the krb5-appl on Linux server(samba DC).
The server is configured to refuse cbc(obsolete and removed from krb5 server)
and accept only aes-256 which is secure.

The telnet doesn't work anymore

Code:telnet samba5
Trying 10.3.0.4...
Connected to samba5.myhome.priv.
Escape character is '^]'.
Unencrypted connection refused. Goodbye.

>>>TELNETD: I will support DES_CFB64
>>>TELNETD: I will support DES_OFB64
>>>TELNETD: in encrypt_wait
Connection to samba5.myhome.priv closed by foreign host.Ftp works fine, the client is Solaris, but also Linux clients using kftp works.

Code:ftp -a samba5
Connected to samba5.myhome.priv.
220 samba5.myhome.priv FTP server (Version 5.60) ready.
334 Using authentication type GSSAPI; ADAT must follow
GSSAPI accepted as authentication type
GSSAPI authentication succeeded
232 GSSAPI user pino@MYHOME.PRIV is authorized as pino
Remote system type is UNIX.
Using binary mode to transfer files.
ftp>The question is really simple: kerberized telnet is a thing of the past?
Why kftpd support AES256 and telnetd not?They developed a ftpd server to support new encryption, and forgot the telnetd?

p.s=I know ssh can replace telnetlatest?d=yIl2AUoC8zA latest?i=6z4mo7Rq4GU:SZybJVpuxzI:F7zBnMy latest?i=6z4mo7Rq4GU:SZybJVpuxzI:V_sGLiP latest?d=qj6IDK7rITs latest?i=6z4mo7Rq4GU:SZybJVpuxzI:gIN9vFw6z4mo7Rq4GU
External Content
Source RSS or Atom Feed
Feed Location https://feeds.feedburner.com/linuxquestions/latest
Feed Title LinuxQuestions.org
Feed Link https://www.linuxquestions.org/questions/
Reply 0 comments