Index of /ports_security/didentd
Name Last modified Size
Parent Directory -
Makefile 14-Jun-2006 11:09 1.2K
distinfo 24-Jan-2006 04:02 189
files/ 25-Dec-2006 04:06 -
pkg-descr 14-Jun-2006 11:09 1.0K
pkg-plist 10-Apr-2004 20:07 541
didentd is a modular RfC1423 (identd) server for FreeBSD and Linux written
with security in mind. The Server normally runs chrooted under /proc/net on
an unprivileged id.
Normally didentd does not send an username but an encrypted audit token to
the client. This token contains all information about the requested
connection: userid owning the connection, source ip:port, destination ip:port,
a timestamp.
If a remote admin has a complaint about something from your machine he can
send this audit token back to you, you can pipe it through didentd-decrypt
and find out which user did the connection. didentd-decrypt outputs all the
information from the audit token. So you can have the benefit of ident
without revealing internal information from your system.
There is also didentd-name which is a server returning the username of the
uid owning the requested connection. This is the classic ident approach.
didentd-static is a server which delivers a fixed reply defined by the
administrator to every request.
WWW: http://c0re.23.nu/c0de/didentd/