>
> On Tue, 26 May 1998, Julian wrote:
>
> > Any thoughts, comments, or counter proposals?
>
> Encrypted RFC 1413 text strings?
>
Naah, ident isn't any use. Identd just returns whatever
the daemon has been set up to return. I really want to lock
this down such that the daemon needs to know what to return in
order to actually get 'permission'.
Envisaged is a 'conversation' during which an exchange of public keys
and 'Auth details' takes place. Arguably similar in concept to
ssh, in that at the end of it the sshd decides whether to let the
connection attempt succeed or fail.
There are proposals out there which are vaguely close to what is
needed, but there still aren't any hooks in exim to let us
use them. I am proposing something reasonably generic which calls
an external program - or if necessary an external daemon (c.f. NIS)
and gets authentication from that.
Julian
Unix Admin, Internet Vision
--
*** Exim information can be found at
http://www.exim.org/ ***
