[OT] Re: encrypted passwords

Brian Bruns camber at ais.org
Sat Apr 13 09:37:43 EDT 2002


If someone gets this going with MSSQL/FreeTDS I'd love to get a write up 
to add to the user guide.  Either CIPE or ssh or FreeS/WAN or whatever.

On Sat, 13 Apr 2002, Dave Brotherstone wrote:

> http://www.tldp.org/HOWTO/HOWTO-INDEX/networking.html#NETVPN
> 
> I use CIPE, and can whole-heartedly recommend it.  The web page
> (www.inka.de/~bigred/devel/cipe.html) has a good description of why ppp-ssh
> is not necessarily reliable.
> 
> Admittedly I've got linux boxes at both ends, sat between client and server.
> You can run CIPE on win2k too - but I've not tried that.
> 
> Cheers,
> Dave.
> 
> >
> > Is there a HOWTO for this?  or can anyone give me a brief description of
> > their setup?  I'm running sql2k on win2k, btw.
> >
> > -brad
> >
> > On Fri, Apr 12, 2002 at 05:13:39PM -0700, Michael Peppler wrote:
> > > You can set up an ssh tunnel to do port forwarding as well as encryption
> > > of the communication.
> > >
> > > Michael
> > >
> > > On Fri, 2002-04-12 at 17:08, Bradley Bell wrote:
> > > > In that case, how does one set up secure communication
> > between e.g. a web
> > > > server and the sql server?  Can something like stunnel be used?
> > > >
> > > > -brad
> > > >
> > > > On Fri, Apr 12, 2002 at 08:00:07PM -0400, Brian Bruns wrote:
> > > > >
> > > > > Absolutely not, it is a clear text equivalent.  You can look at
> > > > > src/tds/login.c for the exact algorithm.
> > > > >
> > > > > On Fri, 12 Apr 2002, Bradley Bell wrote:
> > > > >
> > > > > > Hi, looking at the login packets at
> > http://www.freetds.org/tds.html, I see
> > > > > > that the 7.0 protocol appears to use encrypted passwords,
> > and the other does
> > > > > > not.  How secure is this encryption?  Is it perceived to
> > be good enough to
> > > > > > go out across an open network?
> > > > > >
> > > > > > -brad
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > > > ---
> > > > > You are currently subscribed to freetds as:
> > [bradleyb at u.washington.edu]
> > > > > To unsubscribe, forward this message to
> > $subst('Email.Unsub')
> > > >
> > > > --
> > > > Bradley Bell
> > > > Computer Support Analyst
> > > > University of Washington
> > > > Classroom Support Services
> > > >
> > > > ---
> > > > You are currently subscribed to freetds as: [mpeppler at peppler.org]
> > > > To unsubscribe, forward this message to
> > $subst('Email.Unsub')
> > > >
> > > --
> > > Michael Peppler                              Data Migrations, Inc.
> > > mpeppler at peppler.org           *or*          mpeppler at mbay.net
> > > http://www.mbay.net/~mpeppler
> > > International Sybase User Group: http://www.isug.com
> > >
> > >
> > > ---
> > > You are currently subscribed to freetds as: [bradleyb at u.washington.edu]
> > > To unsubscribe, forward this message to
> > $subst('Email.Unsub')
> >
> > --
> > Bradley Bell
> > Computer Support Analyst
> > University of Washington
> > Classroom Support Services
> >
> > ---
> > You are currently subscribed to freetds as: [davegb at pobox.com]
> > To unsubscribe, forward this message to
> > $subst('Email.Unsub')
> >
> >
> 
> 
> ---
> You are currently subscribed to freetds as: [camber at ais.org]
> To unsubscribe, forward this message to $subst('Email.Unsub')
> 




More information about the FreeTDS mailing list