9front - general discussion about 9front
 help / color / mirror / Atom feed
From: cinap_lenrek@felloff.net
To: 9front@9front.org
Subject: Re: [9front] The last CD distribution
Date: Fri, 3 Jun 2016 13:02:38 +0200	[thread overview]
Message-ID: <31ada30979b6c9c7d6effac7e4c2172f@felloff.net> (raw)
In-Reply-To: <201606030814.u538Esrb029095@mailmsa12.mozu.eo.k-opti.ad.jp>

des tickets have been disabled (2016/04/08) on the auth server to prevent
password bruteforce attack with the -N flag to authsrv in /rc/bin/service.auth/tcp567.
removing that flag would make p9sk1 work again but will get you hacked.

the prefered way is to update your keydb. if your keydb is not already
in aes format (needed to store new aes keys) you have to convert it
with auth/convkeys -pa.

then you have to set new passwords.

then update the nvrams on your servers to match the new hostowner
passwords.

finally, you might update your secstore file and delete the p9sk1 key
and replace them with dp9ik keys.

--
cinap


  reply	other threads:[~2016-06-03 11:02 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-06-03  8:14 岡本健二
2016-06-03 11:02 ` cinap_lenrek [this message]
2016-06-03 12:16 ` [9front] " cinap_lenrek
2016-06-03 14:49   ` stanley lieber
2016-06-04  5:59     ` 岡本健二
2016-06-04  6:16       ` 岡本健二
2016-06-04 14:13       ` cinap_lenrek
2016-06-05  0:20         ` 岡本健二
2016-06-05  0:26           ` 岡本健二
2016-06-05  0:37             ` kokamoto
2016-06-05  1:43             ` cinap_lenrek
2016-06-05  7:49               ` kokamoto

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=31ada30979b6c9c7d6effac7e4c2172f@felloff.net \
    --to=cinap_lenrek@felloff.net \
    --cc=9front@9front.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).