From Cy.Schubert@uumail.gov.bc.ca  Sat Mar 17 17:36:02 2001
Return-Path: <Cy.Schubert@uumail.gov.bc.ca>
Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44])
	by hub.freebsd.org (Postfix) with ESMTP id A9F1C37B71A
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Mar 2001 17:36:01 -0800 (PST)
	(envelope-from Cy.Schubert@uumail.gov.bc.ca)
Received: (from daemon@localhost)
	by point.osg.gov.bc.ca (8.8.7/8.8.8) id RAA01496
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Mar 2001 17:36:01 -0800
Received: from passer.osg.gov.bc.ca(142.32.110.29)
 via SMTP by point.osg.gov.bc.ca, id smtpda01494; Sat Mar 17 17:35:55 2001
Received: (from uucp@localhost)
	by passer.osg.gov.bc.ca (8.11.2/8.9.1) id f2I1ZoG13472
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 17 Mar 2001 17:35:50 -0800 (PST)
Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com"
 via SMTP by passer9.cwsent.com, id smtpdy13469; Sat Mar 17 17:35:29 2001
Received: (from cy@localhost)
	by cwsys.cwsent.com (8.11.3/8.9.1) id f2I1ZTx13105;
	Sat, 17 Mar 2001 17:35:29 -0800 (PST)
Message-Id: <200103180135.f2I1ZTx13105@cwsys.cwsent.com>
Date: Sat, 17 Mar 2001 17:35:29 -0800 (PST)
From: Cy.Schubert@uumail.gov.bc.ca
Reply-To: Cy.Schubert@uumail.gov.bc.ca
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: telnetd -a off broken
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         25885
>Category:       bin
>Synopsis:       telnet -a off still uses SRA authentication
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    markm
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Mar 17 17:40:01 PST 2001
>Closed-Date:    Tue Aug 28 02:33:52 PDT 2001
>Last-Modified:  Tue Aug 28 02:35:16 PDT 2001
>Originator:     
>Release:        FreeBSD 4.3-BETA i386
>Organization:
ITSD Province of BC
>Environment:
System: FreeBSD cwsys 4.3-BETA FreeBSD 4.3-BETA #0: Fri Mar 16 18:50:45 PST 2001 root@cwsys:/opt/cvs-430b/src/sys/compile/CWSYS i386


>Description:
	"telnetd -a off" continues to use SRA.  The man page documents
	it should not.
>How-To-Repeat:
	Telnet from a FreeBSD system to a FreeBSD system which has
	"telnetd -a off" specified in inetd.conf.
>Fix:

The following patch fixes src/libexec/telnetd and src/crypto/telnet/telnetd.

--- src/libexec/telnetd/state.c.orig	Mon Mar  5 03:25:26 2001
+++ src/libexec/telnetd/state.c	Sat Mar 17 16:45:15 2001
@@ -564,8 +564,10 @@
 
 #ifdef	AUTHENTICATION
 		case TELOPT_AUTHENTICATION:
-			func = auth_request;
-			changeok++;
+			if (auth_level >= 0) {
+				func = auth_request;
+				changeok++;
+			}
 			break;
 #endif
 
@@ -624,7 +626,8 @@
 
 #ifdef	AUTHENTICATION
 		case TELOPT_AUTHENTICATION:
-			func = auth_request;
+			if (auth_level >= 0)
+				func = auth_request;
 			break;
 #endif
 
@@ -724,7 +727,8 @@
 
 #if	defined(AUTHENTICATION)
 		case TELOPT_AUTHENTICATION:
-			auth_finished(0, AUTH_REJECT);
+			if (auth_level >= 0)
+				auth_finished(0, AUTH_REJECT);
 			break;
 #endif
 
@@ -777,7 +781,8 @@
 
 #if	defined(AUTHENTICATION)
 		case TELOPT_AUTHENTICATION:
-			auth_finished(0, AUTH_REJECT);
+			if (auth_level >= 0)
+				auth_finished(0, AUTH_REJECT);
 			break;
 #endif
 		default:
@@ -1418,6 +1423,8 @@
     }  /* end of case TELOPT_NEW_ENVIRON */
 #if	defined(AUTHENTICATION)
     case TELOPT_AUTHENTICATION:
+	if (auth_level < 0)
+		break;
 	if (SB_EOF())
 		break;
 	switch(SB_GET()) {
--- src/libexec/telnetd/telnetd.c.orig	Mon Mar  5 03:26:45 2001
+++ src/libexec/telnetd/telnetd.c	Sat Mar 17 16:28:56 2001
@@ -616,14 +616,16 @@
 
     settimer(baseline);
 #if	defined(AUTHENTICATION)
-    /*
-     * Handle the Authentication option before we do anything else.
-     */
-    send_do(TELOPT_AUTHENTICATION, 1);
-    while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
-	ttloop();
-    if (his_state_is_will(TELOPT_AUTHENTICATION)) {
-	retval = auth_wait(name);
+    if (auth_level >= 0) 
+	/*
+	 * Handle the Authentication option before we do anything else.
+	 */
+	send_do(TELOPT_AUTHENTICATION, 1);
+	while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
+	    ttloop();
+	if (his_state_is_will(TELOPT_AUTHENTICATION)) {
+	    retval = auth_wait(name);
+	}
     }
 #endif
 
--- src/libexec/telnetd/utility.c.orig	Mon Oct 30 21:31:47 2000
+++ src/libexec/telnetd/utility.c	Sat Mar 17 16:45:25 2001
@@ -971,6 +971,8 @@
 
 #if	defined(AUTHENTICATION)
 	case TELOPT_AUTHENTICATION:
+	    if (auth_level < 0)
+		break;
 	    sprintf(nfrontp, "AUTHENTICATION");
 	    nfrontp += strlen(nfrontp);
 
--- src/crypto/telnet/telnetd/state.c.orig	Fri Aug 27 18:26:15 1999
+++ src/crypto/telnet/telnetd/state.c	Sat Mar 17 16:52:41 2001
@@ -582,8 +582,10 @@
 
 #ifdef	AUTHENTICATION
 		case TELOPT_AUTHENTICATION:
-			func = auth_request;
-			changeok++;
+			if (auth_level >= 0) {
+				func = auth_request;
+				changeok++;
+			}
 			break;
 #endif
 
@@ -648,7 +650,8 @@
 
 #ifdef	AUTHENTICATION
 		case TELOPT_AUTHENTICATION:
-			func = auth_request;
+			if (auth_level >= 0)
+				func = auth_request;
 			break;
 #endif
 
@@ -752,7 +755,8 @@
 
 #if	defined(AUTHENTICATION)
 		case TELOPT_AUTHENTICATION:
-			auth_finished(0, AUTH_REJECT);
+			if (auth_level >= 0)
+				auth_finished(0, AUTH_REJECT);
 			break;
 #endif
 
@@ -805,7 +809,9 @@
 
 #if	defined(AUTHENTICATION)
 		case TELOPT_AUTHENTICATION:
-			auth_finished(0, AUTH_REJECT);
+			if (auth_level >= 0) {
+				auth_finished(0, AUTH_REJECT);
+			}
 			break;
 #endif
 		default:
@@ -1451,6 +1457,8 @@
     }  /* end of case TELOPT_NEW_ENVIRON */
 #if	defined(AUTHENTICATION)
     case TELOPT_AUTHENTICATION:
+	if (auth_level < 0)
+		break;
 	if (SB_EOF())
 		break;
 	switch(SB_GET()) {
--- src/crypto/telnet/telnetd/telnetd.c.orig	Mon Mar  5 03:35:42 2001
+++ src/crypto/telnet/telnetd/telnetd.c	Sat Mar 17 17:08:49 2001
@@ -640,14 +640,16 @@
 
     settimer(baseline);
 #if	defined(AUTHENTICATION)
-    /*
-     * Handle the Authentication option before we do anything else.
-     */
-    send_do(TELOPT_AUTHENTICATION, 1);
-    while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
-	ttloop();
-    if (his_state_is_will(TELOPT_AUTHENTICATION)) {
-	retval = auth_wait(name);
+	if (auth_level >= 0)
+	/*
+	 * Handle the Authentication option before we do anything else.
+	 */
+	send_do(TELOPT_AUTHENTICATION, 1);
+	while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
+	    ttloop();
+	if (his_state_is_will(TELOPT_AUTHENTICATION)) {
+	    retval = auth_wait(name);
+	}
     }
 #endif
 
--- src/crypto/telnet/telnetd/utility.c.orig	Mon Mar  5 03:37:25 2001
+++ src/crypto/telnet/telnetd/utility.c	Sat Mar 17 16:54:59 2001
@@ -1012,6 +1012,8 @@
 
 #if	defined(AUTHENTICATION)
 	case TELOPT_AUTHENTICATION:
+	    if (auth_level < 0)
+		break;
 	    sprintf(nfrontp, "AUTHENTICATION");
 	    nfrontp += strlen(nfrontp);
 
>Release-Note:
>Audit-Trail:

From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
To: freebsd-gnats-submit@FreeBSD.org
Cc:  
Subject: Re: bin/25885: telnet -a off still uses SRA authentication
Date: Sat, 17 Mar 2001 20:31:36 -0800

 Sorry, the patch is bad.  I fat fingered the first patch corrupting it 
 after testing the patch but before creating the diff file.  The 
 following patch is correct.
 
 --- src/libexec/telnetd/state.c.orig	Mon Mar  5 03:25:26 2001
 +++ src/libexec/telnetd/state.c	Sat Mar 17 16:45:15 2001
 @@ -564,8 +564,10 @@
  
  #ifdef	AUTHENTICATION
  		case TELOPT_AUTHENTICATION:
 -			func = auth_request;
 -			changeok++;
 +			if (auth_level >= 0) {
 +				func = auth_request;
 +				changeok++;
 +			}
  			break;
  #endif
  
 @@ -624,7 +626,8 @@
  
  #ifdef	AUTHENTICATION
  		case TELOPT_AUTHENTICATION:
 -			func = auth_request;
 +			if (auth_level >= 0)
 +				func = auth_request;
  			break;
  #endif
  
 @@ -724,7 +727,8 @@
  
  #if	defined(AUTHENTICATION)
  		case TELOPT_AUTHENTICATION:
 -			auth_finished(0, AUTH_REJECT);
 +			if (auth_level >= 0)
 +				auth_finished(0, AUTH_REJECT);
  			break;
  #endif
  
 @@ -777,7 +781,8 @@
  
  #if	defined(AUTHENTICATION)
  		case TELOPT_AUTHENTICATION:
 -			auth_finished(0, AUTH_REJECT);
 +			if (auth_level >= 0)
 +				auth_finished(0, AUTH_REJECT);
  			break;
  #endif
  		default:
 @@ -1418,6 +1423,8 @@
      }  /* end of case TELOPT_NEW_ENVIRON */
  #if	defined(AUTHENTICATION)
      case TELOPT_AUTHENTICATION:
 +	if (auth_level < 0)
 +		break;
  	if (SB_EOF())
  		break;
  	switch(SB_GET()) {
 --- src/libexec/telnetd/telnetd.c.orig	Mon Mar  5 03:26:45 2001
 +++ src/libexec/telnetd/telnetd.c	Sat Mar 17 16:28:56 2001
 @@ -616,14 +616,16 @@
  
      settimer(baseline);
  #if	defined(AUTHENTICATION)
 -    /*
 -     * Handle the Authentication option before we do anything else.
 -     */
 -    send_do(TELOPT_AUTHENTICATION, 1);
 -    while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
 -	ttloop();
 -    if (his_state_is_will(TELOPT_AUTHENTICATION)) {
 -	retval = auth_wait(name);
 +    if (auth_level >= 0) 
 +	/*
 +	 * Handle the Authentication option before we do anything else.
 +	 */
 +	send_do(TELOPT_AUTHENTICATION, 1);
 +	while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
 +	    ttloop();
 +	if (his_state_is_will(TELOPT_AUTHENTICATION)) {
 +	    retval = auth_wait(name);
 +	}
      }
  #endif
  
 --- src/libexec/telnetd/utility.c.orig	Mon Oct 30 21:31:47 2000
 +++ src/libexec/telnetd/utility.c	Sat Mar 17 16:45:25 2001
 @@ -971,6 +971,8 @@
  
  #if	defined(AUTHENTICATION)
  	case TELOPT_AUTHENTICATION:
 +	    if (auth_level < 0)
 +		break;
  	    sprintf(nfrontp, "AUTHENTICATION");
  	    nfrontp += strlen(nfrontp);
  
 --- src/crypto/telnet/telnetd/state.c.orig	Fri Aug 27 18:26:15 1999
 +++ src/crypto/telnet/telnetd/state.c	Sat Mar 17 16:52:41 2001
 @@ -582,8 +582,10 @@
  
  #ifdef	AUTHENTICATION
  		case TELOPT_AUTHENTICATION:
 -			func = auth_request;
 -			changeok++;
 +			if (auth_level >= 0) {
 +				func = auth_request;
 +				changeok++;
 +			}
  			break;
  #endif
  
 @@ -648,7 +650,8 @@
  
  #ifdef	AUTHENTICATION
  		case TELOPT_AUTHENTICATION:
 -			func = auth_request;
 +			if (auth_level >= 0)
 +				func = auth_request;
  			break;
  #endif
  
 @@ -752,7 +755,8 @@
  
  #if	defined(AUTHENTICATION)
  		case TELOPT_AUTHENTICATION:
 -			auth_finished(0, AUTH_REJECT);
 +			if (auth_level >= 0)
 +				auth_finished(0, AUTH_REJECT);
  			break;
  #endif
  
 @@ -805,7 +809,9 @@
  
  #if	defined(AUTHENTICATION)
  		case TELOPT_AUTHENTICATION:
 -			auth_finished(0, AUTH_REJECT);
 +			if (auth_level >= 0) {
 +				auth_finished(0, AUTH_REJECT);
 +			}
  			break;
  #endif
  		default:
 @@ -1451,6 +1457,8 @@
      }  /* end of case TELOPT_NEW_ENVIRON */
  #if	defined(AUTHENTICATION)
      case TELOPT_AUTHENTICATION:
 +	if (auth_level < 0)
 +		break;
  	if (SB_EOF())
  		break;
  	switch(SB_GET()) {
 --- src/crypto/telnet/telnetd/telnetd.c.orig	Mon Mar  5 03:35:42 2001
 +++ src/crypto/telnet/telnetd/telnetd.c	Sat Mar 17 17:08:49 2001
 @@ -640,14 +640,16 @@
  
      settimer(baseline);
  #if	defined(AUTHENTICATION)
 -    /*
 -     * Handle the Authentication option before we do anything else.
 -     */
 -    send_do(TELOPT_AUTHENTICATION, 1);
 -    while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
 -	ttloop();
 -    if (his_state_is_will(TELOPT_AUTHENTICATION)) {
 -	retval = auth_wait(name);
 +    if (auth_level >= 0) {
 +	/*
 +	 * Handle the Authentication option before we do anything else.
 +	 */
 +	send_do(TELOPT_AUTHENTICATION, 1);
 +	while (his_will_wont_is_changing(TELOPT_AUTHENTICATION))
 +	    ttloop();
 +	if (his_state_is_will(TELOPT_AUTHENTICATION)) {
 +	    retval = auth_wait(name);
 +	}
      }
  #endif
  
 --- src/crypto/telnet/telnetd/utility.c.orig	Mon Mar  5 03:37:25 2001
 +++ src/crypto/telnet/telnetd/utility.c	Sat Mar 17 16:54:59 2001
 @@ -1012,6 +1012,8 @@
  
  #if	defined(AUTHENTICATION)
  	case TELOPT_AUTHENTICATION:
 +	    if (auth_level < 0)
 +		break;
  	    sprintf(nfrontp, "AUTHENTICATION");
  	    nfrontp += strlen(nfrontp);
  
 
 
 Regards,                         Phone:  (250)387-8437
 Cy Schubert                        Fax:  (250)387-5766
 Team Leader, Sun/Alpha Team   Internet:  Cy.Schubert@osg.gov.bc.ca
 Open Systems Group, ITSD, ISTA
 Province of BC            
 
 
 

From: Volker Stolz <stolz@i2.informatik.rwth-aachen.de>
To: freebsd-gnats-submit@FreeBSD.org, Cy.Schubert@uumail.gov.bc.ca
Cc:  
Subject: Re: bin/25885: telnet -a off still uses SRA authentication
Date: Sat, 18 Aug 2001 20:11:40 +0200

 This is a cryptographically signed message in MIME format.
 
 --------------msED14C1BCF475674DE7213E38
 Content-Type: text/plain; charset=iso-8859-1
 Content-Transfer-Encoding: 8bit
 
 This PR can be closed
 
 Reason:
 telnet -X sra now behaves as it should (last checked on 4.4-PRE).
 -- 
 "I came out of it dead broke, without a house, without anything, except
 a girlfriend and a knowledge of Unix." "Well, thats something. Normally
 those two are mutually exclusive." N. Stephenson, "Cryptonomicon"
 --------------msED14C1BCF475674DE7213E38
 Content-Type: application/x-pkcs7-signature; name="smime.p7s"
 Content-Transfer-Encoding: base64
 Content-Disposition: attachment; filename="smime.p7s"
 Content-Description: S/MIME Cryptographic Signature
 
 MIIFmQYJKoZIhvcNAQcCoIIFijCCBYYCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC
 A0YwggNCMIICq6ADAgECAg5ZtgAAAAIvAuEdW+x2hTANBgkqhkiG9w0BAQQFADCBvDELMAkG
 A1UEBhMCREUxEDAOBgNVBAgTB0hhbWJ1cmcxEDAOBgNVBAcTB0hhbWJ1cmcxOjA4BgNVBAoT
 MVRDIFRydXN0Q2VudGVyIGZvciBTZWN1cml0eSBpbiBEYXRhIE5ldHdvcmtzIEdtYkgxIjAg
 BgNVBAsTGVRDIFRydXN0Q2VudGVyIENsYXNzIDEgQ0ExKTAnBgkqhkiG9w0BCQEWGmNlcnRp
 ZmljYXRlQHRydXN0Y2VudGVyLmRlMB4XDTAxMDYxMTE2NDY1OVoXDTAyMDYxMTE2NDY1OVow
 VzELMAkGA1UEBhMCREUxFTATBgNVBAMTDFZvbGtlciBTdG9sejExMC8GCSqGSIb3DQEJARYi
 c3RvbHpAaTIuaW5mb3JtYXRpay5yd3RoLWFhY2hlbi5kZTCBnzANBgkqhkiG9w0BAQEFAAOB
 jQAwgYkCgYEA8yx0h5hC2nFxFa94YfCvUY1iZgkctI2yzzzLB5uEHoSiIv+a4sCO+x7zkiDY
 b6NvABATGrW7E6VWRjQu6QhQhJP7BQ4LUxDnG0p28q6WK177eW5r0Fpet01q/d0Jkm8nK72b
 AH4YEJ0MF3FyxUqCBeVlDcAJEalIigXXsia/WAkCAwEAAaOBqjCBpzAzBglghkgBhvhCAQgE
 JhYkaHR0cDovL3d3dy50cnVzdGNlbnRlci5kZS9ndWlkZWxpbmVzMBEGCWCGSAGG+EIBAQQE
 AwIFoDBdBglghkgBhvhCAQMEUBZOaHR0cHM6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2dpLWJp
 bi9jaGVjay1yZXYuY2dpLzU5QjYwMDAwMDAwMjJGMDJFMTFENUJFQzc2ODU/MA0GCSqGSIb3
 DQEBBAUAA4GBAIEDGk47MKqF6ekljkY0fsJcBCPFm98WXVweBZWLS1Hy1p+JDhlezAK3g6oc
 SaejAnkX7aAoeMPQBNAITVRg+zowhZon05e4wki9m8w7dBKGGl7Jmh5/LXiCE3ob7BBOhFtK
 Kt9sr+4Rdm/JoBiaYwDwTd2MKdwUgfaE67fWltICMYICGzCCAhcCAQEwgc8wgbwxCzAJBgNV
 BAYTAkRFMRAwDgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMTowOAYDVQQKEzFU
 QyBUcnVzdENlbnRlciBmb3IgU2VjdXJpdHkgaW4gRGF0YSBOZXR3b3JrcyBHbWJIMSIwIAYD
 VQQLExlUQyBUcnVzdENlbnRlciBDbGFzcyAxIENBMSkwJwYJKoZIhvcNAQkBFhpjZXJ0aWZp
 Y2F0ZUB0cnVzdGNlbnRlci5kZQIOWbYAAAACLwLhHVvsdoUwCQYFKw4DAhoFAKCBojAYBgkq
 hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wMTA4MTgxODExNDBaMCMG
 CSqGSIb3DQEJBDEWBBTkKP/8lBfdIaGnFjNbmT7AAQTlzzBDBgkqhkiG9w0BCQ8xNjA0MAoG
 CCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDAHBgUrDgMCBzANBggqhkiG9w0DAgIBQDANBgkq
 hkiG9w0BAQEFAASBgAxk6kD20AEvhCiJ0wh58EaiTXDI3hY6g3A2xmeQ3AaMXj88k10Sseri
 pQ/HpbCwTw/En4aaKQWtV4lMau8RPWPFIdfoyWgsVMrtYuaOt4kOxK596PKduMTUCPRgzEed
 52T6jZF71K5T3tHFlqPtWvRgO66mrYV7WzgGHxgEZq5e
 --------------msED14C1BCF475674DE7213E38--
 

From: Volker Stolz <stolz@i2.informatik.rwth-aachen.de>
To: freebsd-gnats-submit@FreeBSD.org, Cy.Schubert@uumail.gov.bc.ca
Cc:  
Subject: Re: bin/25885: telnet -a off still uses SRA authentication
Date: Sat, 18 Aug 2001 20:26:12 +0200

 This is a cryptographically signed message in MIME format.
 
 --------------ms8CCFC3984B2035FDD9C02A76
 Content-Type: text/plain; charset=iso-8859-1
 Content-Transfer-Encoding: 8bit
 
 Stupid, stupid, stupid. Dont know what I tested,
 telnetd -X sra / -a off is still borked, guess I must
 have tested with "telnet -X sra localhost" because of
 some PAM/login stuff Im currently working out.
 -- 
 "I came out of it dead broke, without a house, without anything, except
 a girlfriend and a knowledge of Unix." "Well, thats something. Normally
 those two are mutually exclusive." N. Stephenson, "Cryptonomicon"
 --------------ms8CCFC3984B2035FDD9C02A76
 Content-Type: application/x-pkcs7-signature; name="smime.p7s"
 Content-Transfer-Encoding: base64
 Content-Disposition: attachment; filename="smime.p7s"
 Content-Description: S/MIME Cryptographic Signature
 
 MIIFmQYJKoZIhvcNAQcCoIIFijCCBYYCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC
 A0YwggNCMIICq6ADAgECAg5ZtgAAAAIvAuEdW+x2hTANBgkqhkiG9w0BAQQFADCBvDELMAkG
 A1UEBhMCREUxEDAOBgNVBAgTB0hhbWJ1cmcxEDAOBgNVBAcTB0hhbWJ1cmcxOjA4BgNVBAoT
 MVRDIFRydXN0Q2VudGVyIGZvciBTZWN1cml0eSBpbiBEYXRhIE5ldHdvcmtzIEdtYkgxIjAg
 BgNVBAsTGVRDIFRydXN0Q2VudGVyIENsYXNzIDEgQ0ExKTAnBgkqhkiG9w0BCQEWGmNlcnRp
 ZmljYXRlQHRydXN0Y2VudGVyLmRlMB4XDTAxMDYxMTE2NDY1OVoXDTAyMDYxMTE2NDY1OVow
 VzELMAkGA1UEBhMCREUxFTATBgNVBAMTDFZvbGtlciBTdG9sejExMC8GCSqGSIb3DQEJARYi
 c3RvbHpAaTIuaW5mb3JtYXRpay5yd3RoLWFhY2hlbi5kZTCBnzANBgkqhkiG9w0BAQEFAAOB
 jQAwgYkCgYEA8yx0h5hC2nFxFa94YfCvUY1iZgkctI2yzzzLB5uEHoSiIv+a4sCO+x7zkiDY
 b6NvABATGrW7E6VWRjQu6QhQhJP7BQ4LUxDnG0p28q6WK177eW5r0Fpet01q/d0Jkm8nK72b
 AH4YEJ0MF3FyxUqCBeVlDcAJEalIigXXsia/WAkCAwEAAaOBqjCBpzAzBglghkgBhvhCAQgE
 JhYkaHR0cDovL3d3dy50cnVzdGNlbnRlci5kZS9ndWlkZWxpbmVzMBEGCWCGSAGG+EIBAQQE
 AwIFoDBdBglghkgBhvhCAQMEUBZOaHR0cHM6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2dpLWJp
 bi9jaGVjay1yZXYuY2dpLzU5QjYwMDAwMDAwMjJGMDJFMTFENUJFQzc2ODU/MA0GCSqGSIb3
 DQEBBAUAA4GBAIEDGk47MKqF6ekljkY0fsJcBCPFm98WXVweBZWLS1Hy1p+JDhlezAK3g6oc
 SaejAnkX7aAoeMPQBNAITVRg+zowhZon05e4wki9m8w7dBKGGl7Jmh5/LXiCE3ob7BBOhFtK
 Kt9sr+4Rdm/JoBiaYwDwTd2MKdwUgfaE67fWltICMYICGzCCAhcCAQEwgc8wgbwxCzAJBgNV
 BAYTAkRFMRAwDgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMTowOAYDVQQKEzFU
 QyBUcnVzdENlbnRlciBmb3IgU2VjdXJpdHkgaW4gRGF0YSBOZXR3b3JrcyBHbWJIMSIwIAYD
 VQQLExlUQyBUcnVzdENlbnRlciBDbGFzcyAxIENBMSkwJwYJKoZIhvcNAQkBFhpjZXJ0aWZp
 Y2F0ZUB0cnVzdGNlbnRlci5kZQIOWbYAAAACLwLhHVvsdoUwCQYFKw4DAhoFAKCBojAYBgkq
 hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wMTA4MTgxODI2MTJaMCMG
 CSqGSIb3DQEJBDEWBBRj0dXXwdJPtn2KmWNqxslaMFSseDBDBgkqhkiG9w0BCQ8xNjA0MAoG
 CCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDAHBgUrDgMCBzANBggqhkiG9w0DAgIBQDANBgkq
 hkiG9w0BAQEFAASBgHMjxG4GnVqUwRxYNAwKRHJTOSLBDfgF1VDavaYaZ58Xrxq8+raVzatd
 XZBrnFDBe4oVKhGsCaIdtlzavvls2gkem8gnsp8pJ8BPqWnJsb8I7eD1KdKYz6NaTyt6YKlW
 2uYffr6iHSX5QrmIGrSqGuLQW9gGTXq3+CtSeZcqUHuN
 --------------ms8CCFC3984B2035FDD9C02A76--
 
Responsible-Changed-From-To: freebsd-bugs->markm 
Responsible-Changed-By: jkoshy 
Responsible-Changed-When: Mon Aug 20 01:33:13 PDT 2001 
Responsible-Changed-Why:  
Markm maintains telnet{,d} and their crypto equivalents. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=25885 

From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
To: Volker Stolz <stolz@i2.informatik.rwth-aachen.de>
Cc: freebsd-gnats-submit@FreeBSD.org, Cy.Schubert@uumail.gov.bc.ca
Subject: Re: bin/25885: telnet -a off still uses SRA authentication 
Date: Mon, 27 Aug 2001 22:08:07 -0700

 Agreed.
 
 
 Regards,                         Phone:  (250)387-8437
 Cy Schubert                        Fax:  (250)387-5766
 Team Leader, Sun/Alpha Team   Internet:  Cy.Schubert@osg.gov.bc.ca
 Open Systems Group, ITSD
 Ministry of Management Services
 Province of BC
 
 In message <3B7EAFDC.3AB4A3A7@i2.informatik.rwth-aachen.de>, Volker =
 
 Stolz write
 s:
 > This is a cryptographically signed message in MIME format.
 > =
 
 > --------------msED14C1BCF475674DE7213E38
 > Content-Type: text/plain; charset=3Diso-8859-1
 > Content-Transfer-Encoding: 8bit
 > =
 
 > This PR can be closed
 > =
 
 > Reason:
 > telnet -X sra now behaves as it should (last checked on 4.4-PRE).
 > -- =
 
 > "I came out of it dead broke, without a house, without anything, except=
 
 > a girlfriend and a knowledge of Unix." "Well, that=B4s something. Norma=
 lly
 > those two are mutually exclusive." N. Stephenson, "Cryptonomicon"
 > --------------msED14C1BCF475674DE7213E38
 > Content-Type: application/x-pkcs7-signature; name=3D"smime.p7s"
 > Content-Transfer-Encoding: base64
 > Content-Disposition: attachment; filename=3D"smime.p7s"
 > Content-Description: S/MIME Cryptographic Signature
 > =
 
 > MIIFmQYJKoZIhvcNAQcCoIIFijCCBYYCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaC=
 C
 > A0YwggNCMIICq6ADAgECAg5ZtgAAAAIvAuEdW+x2hTANBgkqhkiG9w0BAQQFADCBvDELMAk=
 G
 > A1UEBhMCREUxEDAOBgNVBAgTB0hhbWJ1cmcxEDAOBgNVBAcTB0hhbWJ1cmcxOjA4BgNVBAo=
 T
 > MVRDIFRydXN0Q2VudGVyIGZvciBTZWN1cml0eSBpbiBEYXRhIE5ldHdvcmtzIEdtYkgxIjA=
 g
 > BgNVBAsTGVRDIFRydXN0Q2VudGVyIENsYXNzIDEgQ0ExKTAnBgkqhkiG9w0BCQEWGmNlcnR=
 p
 > ZmljYXRlQHRydXN0Y2VudGVyLmRlMB4XDTAxMDYxMTE2NDY1OVoXDTAyMDYxMTE2NDY1OVo=
 w
 > VzELMAkGA1UEBhMCREUxFTATBgNVBAMTDFZvbGtlciBTdG9sejExMC8GCSqGSIb3DQEJARY=
 i
 > c3RvbHpAaTIuaW5mb3JtYXRpay5yd3RoLWFhY2hlbi5kZTCBnzANBgkqhkiG9w0BAQEFAAO=
 B
 > jQAwgYkCgYEA8yx0h5hC2nFxFa94YfCvUY1iZgkctI2yzzzLB5uEHoSiIv+a4sCO+x7zkiD=
 Y
 > b6NvABATGrW7E6VWRjQu6QhQhJP7BQ4LUxDnG0p28q6WK177eW5r0Fpet01q/d0Jkm8nK72=
 b
 > AH4YEJ0MF3FyxUqCBeVlDcAJEalIigXXsia/WAkCAwEAAaOBqjCBpzAzBglghkgBhvhCAQg=
 E
 > JhYkaHR0cDovL3d3dy50cnVzdGNlbnRlci5kZS9ndWlkZWxpbmVzMBEGCWCGSAGG+EIBAQQ=
 E
 > AwIFoDBdBglghkgBhvhCAQMEUBZOaHR0cHM6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2dpLWJ=
 p
 > bi9jaGVjay1yZXYuY2dpLzU5QjYwMDAwMDAwMjJGMDJFMTFENUJFQzc2ODU/MA0GCSqGSIb=
 3
 > DQEBBAUAA4GBAIEDGk47MKqF6ekljkY0fsJcBCPFm98WXVweBZWLS1Hy1p+JDhlezAK3g6o=
 c
 > SaejAnkX7aAoeMPQBNAITVRg+zowhZon05e4wki9m8w7dBKGGl7Jmh5/LXiCE3ob7BBOhFt=
 K
 > Kt9sr+4Rdm/JoBiaYwDwTd2MKdwUgfaE67fWltICMYICGzCCAhcCAQEwgc8wgbwxCzAJBgN=
 V
 > BAYTAkRFMRAwDgYDVQQIEwdIYW1idXJnMRAwDgYDVQQHEwdIYW1idXJnMTowOAYDVQQKEzF=
 U
 > QyBUcnVzdENlbnRlciBmb3IgU2VjdXJpdHkgaW4gRGF0YSBOZXR3b3JrcyBHbWJIMSIwIAY=
 D
 > VQQLExlUQyBUcnVzdENlbnRlciBDbGFzcyAxIENBMSkwJwYJKoZIhvcNAQkBFhpjZXJ0aWZ=
 p
 > Y2F0ZUB0cnVzdGNlbnRlci5kZQIOWbYAAAACLwLhHVvsdoUwCQYFKw4DAhoFAKCBojAYBgk=
 q
 > hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wMTA4MTgxODExNDBaMCM=
 G
 > CSqGSIb3DQEJBDEWBBTkKP/8lBfdIaGnFjNbmT7AAQTlzzBDBgkqhkiG9w0BCQ8xNjA0MAo=
 G
 > CCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDAHBgUrDgMCBzANBggqhkiG9w0DAgIBQDANBgk=
 q
 > hkiG9w0BAQEFAASBgAxk6kD20AEvhCiJ0wh58EaiTXDI3hY6g3A2xmeQ3AaMXj88k10Sser=
 i
 > pQ/HpbCwTw/En4aaKQWtV4lMau8RPWPFIdfoyWgsVMrtYuaOt4kOxK596PKduMTUCPRgzEe=
 d
 > 52T6jZF71K5T3tHFlqPtWvRgO66mrYV7WzgGHxgEZq5e
 > --------------msED14C1BCF475674DE7213E38--
 > =
 
 
 
State-Changed-From-To: open->closed 
State-Changed-By: markm 
State-Changed-When: Tue Aug 28 02:33:52 PDT 2001 
State-Changed-Why:  
Originator agrees the PR can be closed. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=25885 
>Unformatted:
