Columbia Kermit/kermit.zip/newsgroups/misc.19990422-19990725/[e-mail] _Fri Jun 18 14:48:38 1999.msg

Internet Message Format | 2020-01-01 | 2KB

Return-Path: <[e-mail]>
Received: from newsmaster.cc.columbia.edu (newsmaster.cc.columbia.edu [128.59.59.30])
    by watsun.cc.columbia.edu (8.8.5/8.8.5) with ESMTP id OAA12503
    for <[e-mail]>; Fri, 18 Jun 1999 14:48:37 -0400 (EDT)
Received: (from news@localhost)
    by newsmaster.cc.columbia.edu (8.8.5/8.8.5) id OAA16446
    for [e-mail]; Fri, 18 Jun 1999 14:45:14 -0400 (EDT)
X-Authentication-Warning: newsmaster.cc.columbia.edu: news set sender to <news> using -f
From: "Tom Robinson" <[e-mail]>
Subject: Kermit NT host?
Date: Fri, 18 Jun 1999 11:47:20 -0700
Organization: Posted via RemarQ Communities, Inc.
Message-ID: <[e-mail]>
To: [e-mail]

Kermit 95 Telnet Host has its own user authentication and user-level
security. This must be done in Kermit because Win95 has no user-level
security.
On NT, the same Kermit 95 authentication and security is used.
However, NT has decent security that could be used instead.

Is this possible, or planned, or already implemented elsewhere:

Kermit NT running as a service.
Authentication done against the NT user list, so no Kermit user/password
list needed.
All subsequent activity takes place in a spawned processes running as the
user ID the user has logged in as.
This would enforce NT's file-level access security, which is much like UNIX
security.
It would also allow fairly safe Command Prompt access, because the user's
commands would be restricted to those files they could access if logged in
to the NT console as themselves, or if accessing files on the NT Server
logged in as themselves.

Basically, other than the telnetd part, Kermit could run just like on UNIX
and let the OS take care of security.

Comments?
....Tom Robinson