You are here

didentd

Comment: 
Modular RFC1423 (identd) server sending encrypted audit tokens
Version: 
0.2

didentd is a modular RfC1423 (identd) server for FreeBSD and Linux written
with security in mind. The Server normally runs chrooted under /proc/net on
an unprivileged id.

Normally didentd does not send an username but an encrypted audit token to
the client. This token contains all information about the requested
connection: userid owning the connection, source ip:port, destination ip:port,
a timestamp.

If a remote admin has a complaint about something from your machine he can
send this audit token back to you, you can pipe it through didentd-decrypt
and find out which user did the connection. didentd-decrypt outputs all the
information from the audit token. So you can have the benefit of ident
without revealing internal information from your system.

There is also didentd-name which is a server returning the username of the
uid owning the requested connection. This is the classic ident approach.

didentd-static is a server which delivers a fixed reply defined by the
administrator to every request.

md5: 
MD5 (didentd-0.2.tar.gz) = 57dcf69b4a3dce6324e14aa29938ba13
Category: 
security
Url: 
http://c0re.23.nu/c0de/didentd/