Re: Unbound in base (review)

Any more feedback on this? We need more testing to proceed! jakob

OpenBSD & BIND 9 cache poisoning

as some of you may have noticed, a new weakness in BIND 9 has recently been discovered. using this weakness, an attacker can remotely poison the cache of any BIND 9 server. the attacker can do this due to a weakness in the transaction ID generation algorithm used. when BIND 9 was first im

BSD authentication username rewrite

hi, I have an imap server (dovecot) that can auhenticate using BSD authentication. however, when imap server requests authenitcation for user xyzzy, I'd like the bsd authentication layer to authenticate user 'xyzzy/mail' (which has a separate password in kerberos). I can see multiple solu

Re: BSD authentication username rewrite

On 12 maj 2008, at 11.43, LIVAI Daniel wrote: Just simply out of curiosity; why don't you use dovecot with virtual users in plain text passwd-file style, or even sql/ldap? 'cause the users are provisioned using kerberos. jakob

Re: BSD authentication username rewrite

On 12 maj 2008, at 12.08, LIVAI Daniel wrote: Could this be a help for you? http://wiki.dovecot.org/Authentication/Kerberos thanks, but that i GSSAPI-authentication - i.e. not password authentication against a kerberos realm. jakob