draft-ietf-secsh-userauth-18.2.ps
来自「OTP是开放电信平台的简称」· PS 代码 · 共 1,882 行 · 第 1/4 页
PS
1,882 行
( SSH_MSG_USERAUTH_PASSWD_CHANGEREQ. The meaning of these is as) s5 602 M( follows:) s5 580 M( SSH_MSG_USERAUTH_SUCCESS The password has been changed, and) s5 569 M( authentication has been successfully completed.) s5 547 M( SSH_MSG_USERAUTH_FAILURE with partial success The password has) s5 536 M( been changed, but more authentications are needed.) s5 514 M( SSH_MSG_USERAUTH_FAILURE without partial success The password has) s5 503 M( not been changed. Either password changing was not supported, or) s5 492 M( the old password was bad. Note that if the server has already) s5 481 M( sent SSH_MSG_USERAUTH_PASSWD_CHANGEREQ, we know that it supports) s5 470 M( changing the password.) s5 448 M( SSH_MSG_USERAUTH_CHANGEREQ The password was not changed because) s5 437 M( the new password was not acceptable \(e.g. too easy to guess\).) s5 415 M( The following method-specific message numbers are used by the) s5 404 M( password authentication method.) s5 382 M( #define SSH_MSG_USERAUTH_PASSWD_CHANGEREQ 60) s5 349 M(3.5 Host-Based Authentication: hostbased) s5 327 M( Some sites wish to allow authentication based on the host where the) s5 316 M( user is coming from, and the user name on the remote host. While) s5 305 M( this form of authentication is not suitable for high-security sites,) s5 294 M( it can be very convenient in many environments. This form of) s5 283 M( authentication is OPTIONAL. When used, special care SHOULD be taken) s5 272 M( to prevent a regular user from obtaining the private host key.) s5 250 M( The client requests this form of authentication by sending the) s5 239 M( following message. It is similar to the UNIX "rhosts" and) s5 228 M( "hosts.equiv" styles of authentication, except that the identity of) s5 217 M( the client host is checked more rigorously.) s5 195 M( This method works by having the client send a signature created with) s5 184 M( the private key of the client host, which the server checks with that) s5 173 M( host's public key. Once the client host's identity is established,) s5 129 M(Ylonen & Moffat Expires March 2, 2003 [Page 11]) s_RSPStoPSsaved restoreuserdict/PStoPSsaved save putPStoPSmatrix setmatrix595.000000 421.271378 translate90 rotate0.706651 dup scaleuserdict/PStoPSmatrix matrix currentmatrix putuserdict/PStoPSclip{0 0 moveto 595.000000 0 rlineto 0 842.000000 rlineto -595.000000 0 rlineto closepath}put initclipPStoPSxform concat%%BeginPageSetup_S75 0 translate/pagenum 12 def/fname () def/fdir () def/ftail () def/user_header_p false def%%EndPageSetup5 723 M(Internet-Draft SSH Authentication Protocol September 2002) s5 690 M( authorization \(but no further authentication\) is performed based on) s5 679 M( the user names on the server and the client, and the client host) s5 668 M( name.) s5 646 M( byte SSH_MSG_USERAUTH_REQUEST) s5 635 M( string user name) s5 624 M( string service) s5 613 M( string "hostbased") s5 602 M( string public key algorithm for host key) s5 591 M( string public host key and certificates for client host) s5 580 M( string client host name \(FQDN; US-ASCII\)) s5 569 M( string user name on the client host \(ISO-10646 UTF-8\)) s5 558 M( string signature) s5 536 M( Public key algorithm names for use in "public key algorithm for host) s5 525 M( key" are defined in the transport layer specification. The "public) s5 514 M( host key for client host" may include certificates.) s5 492 M( Signature is a signature with the private host key of the following) s5 481 M( data, in this order:) s5 459 M( string session identifier) s5 448 M( byte SSH_MSG_USERAUTH_REQUEST) s5 437 M( string user name) s5 426 M( string service) s5 415 M( string "hostbased") s5 404 M( string public key algorithm for host key) s5 393 M( string public host key and certificates for client host) s5 382 M( string client host name \(FQDN; US-ASCII\)) s5 371 M( string user name on the client host\(ISO-10646 UTF-8\)) s5 349 M( The server MUST verify that the host key actually belongs to the) s5 338 M( client host named in the message, that the given user on that host is) s5 327 M( allowed to log in, and that the signature is a valid signature on the) s5 316 M( appropriate value by the given host key. The server MAY ignore the) s5 305 M( client user name, if it wants to authenticate only the client host.) s5 283 M( It is RECOMMENDED that whenever possible, the server perform) s5 272 M( additional checks to verify that the network address obtained from) s5 261 M( the \(untrusted\) network matches the given client host name. This) s5 250 M( makes exploiting compromised host keys more difficult. Note that) s5 239 M( this may require special handling for connections coming through a) s5 228 M( firewall.) s5 206 M(4. Security Considerations) s5 184 M( The purpose of this protocol is to perform client user) s5 173 M( authentication. It assumed that this runs over a secure transport) s5 129 M(Ylonen & Moffat Expires March 2, 2003 [Page 12]) s_RSPStoPSsaved restore%%Page: (12,13) 7userdict/PStoPSsaved save putPStoPSmatrix setmatrix595.000000 0.271378 translate90 rotate0.706651 dup scaleuserdict/PStoPSmatrix matrix currentmatrix putuserdict/PStoPSclip{0 0 moveto 595.000000 0 rlineto 0 842.000000 rlineto -595.000000 0 rlineto closepath}put initclip/showpage{}def/copypage{}def/erasepage{}defPStoPSxform concat%%BeginPageSetup_S75 0 translate/pagenum 13 def/fname () def/fdir () def/ftail () def/user_header_p false def%%EndPageSetup5 723 M(Internet-Draft SSH Authentication Protocol September 2002) s5 690 M( layer protocol, which has already authenticated the server machine,) s5 679 M( established an encrypted communications channel, and computed a) s5 668 M( unique session identifier for this session. The transport layer) s5 657 M( provides forward secrecy for password authentication and other) s5 646 M( methods that rely on secret data.) s5 624 M( Full security considerations for this protocol are provided in) s5 613 M( Section 8 of [SSH-ARCH]) s5 591 M(Normative) s5 569 M( [SSH-ARCH]) s5 558 M( Ylonen, T., "SSH Protocol Architecture", I-D) s5 547 M( draft-ietf-architecture-15.txt, Oct 2003.) s5 525 M( [SSH-TRANS]) s5 514 M( Ylonen, T., "SSH Transport Layer Protocol", I-D) s5 503 M( draft-ietf-transport-17.txt, Oct 2003.) s5 481 M( [SSH-USERAUTH]) s5 470 M( Ylonen, T., "SSH Authentication Protocol", I-D) s5 459 M( draft-ietf-userauth-18.txt, Oct 2003.) s5 437 M( [SSH-CONNECT]) s5 426 M( Ylonen, T., "SSH Connection Protocol", I-D) s5 415 M( draft-ietf-connect-18.txt, Oct 2003.) s5 393 M( [SSH-NUMBERS]) s5 382 M( Lehtinen, S. and D. Moffat, "SSH Protocol Assigned) s5 371 M( Numbers", I-D draft-ietf-secsh-assignednumbers-05.txt, Oct) s5 360 M( 2003.) s5 338 M( [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate) s5 327 M( Requirement Levels", BCP 14, RFC 2119, March 1997.) s5 305 M(Informative) s5 283 M( [RFC3066] Alvestrand, H., "Tags for the Identification of) s5 272 M( Languages", BCP 47, RFC 3066, January 2001.) s5 250 M( [RFC2279] Yergeau, F., "UTF-8, a transformation format of ISO) s5 239 M( 10646", RFC 2279, January 1998.) s5 129 M(Ylonen & Moffat Expires March 2, 2003 [Page 13]) s_RSPStoPSsaved restoreuserdict/PStoPSsaved save putPStoPSmatrix setmatrix595.000000 421.271378 translate90 rotate0.706651 dup scaleuserdict/PStoPSmatrix matrix currentmatrix putuserdict/PStoPSclip{0 0 moveto 595.000000 0 rlineto 0 842.000000 rlineto -595.000000 0 rlineto closepath}put initclipPStoPSxform concat%%BeginPageSetup_S75 0 translate/pagenum 14 def/fname () def/fdir () def/ftail () def/user_header_p false def%%EndPageSetup5 723 M(Internet-Draft SSH Authentication Protocol September 2002) s5 690 M(Authors' Addresses) s5 668 M( Tatu Ylonen) s5 657 M( SSH Communications Security Corp) s5 646 M( Fredrikinkatu 42) s5 635 M( HELSINKI FIN-00100) s5 624 M( Finland) s5 602 M( EMail: ylo@ssh.com) s5 569 M( Darren J. Moffat \(editor\)) s5 558 M( Sun Microsystems, Inc) s5 547 M( 17 Network Circle) s5 536 M( Menlo Park 95025) s5 525 M( USA) s5 503 M( EMail: Darren.Moffat@Sun.COM) s5 129 M(Ylonen & Moffat Expires March 2, 2003 [Page 14]) s_RSPStoPSsaved restore%%Page: (14,15) 8userdict/PStoPSsaved save putPStoPSmatrix setmatrix595.000000 0.271378 translate90 rotate0.706651 dup scaleuserdict/PStoPSmatrix matrix currentmatrix putuserdict/PStoPSclip{0 0 moveto 595.000000 0 rlineto 0 842.000000 rlineto -595.000000 0 rlineto closepath}put initclip/showpage{}def/copypage{}def/erasepage{}defPStoPSxform concat%%BeginPageSetup_S75 0 translate/pagenum 15 def/fname () def/fdir () def/ftail () def/user_header_p false def%%EndPageSetup5 723 M(Internet-Draft SSH Authentication Protocol September 2002) s5 690 M(Intellectual Property Statement) s5 668 M( The IETF takes no position regarding the validity or scope of any) s5 657 M( intellectual property or other rights that might be claimed to) s5 646 M( pertain to the implementation or use of the technology described in) s5 635 M( this document or the extent to which any license under such rights) s5 624 M( might or might not be available; neither does it represent that it) s5 613 M( has made any effort to identify any such rights. Information on the) s5 602 M( IETF's procedures with respect to rights in standards-track and) s5 591 M( standards-related documentation can be found in BCP-11. Copies of) s5 580 M( claims of rights made available for publication and any assurances of) s5 569 M( licenses to be made available, or the result of an attempt made to) s5 558 M( obtain a general license or permission for the use of such) s5 547 M( proprietary rights by implementors or users of this specification can) s5 536 M( be obtained from the IETF Secretariat.) s5 514 M( The IETF invites any interested party to bring to its attention any) s5 503 M( copyrights, patents or patent applications, or other proprietary) s5 492 M( rights which may cover technology that may be required to practice) s5 481 M( this standard. Please address the information to the IETF Executive) s5 470 M( Director.) s5 448 M( The IETF has been notified of intellectual property rights claimed in) s5 437 M( regard to some or all of the specification contained in this) s5 426 M( document. For more information consult the online list of claimed) s5 415 M( rights.) s5 382 M(Full Copyright Statement) s5 360 M( Copyright \(C\) The Internet Society \(2002\). All Rights Reserved.) s5 338 M( This document and translations of it may be copied and furnished to) s5 327 M( others, and derivative works that comment on or otherwise explain it) s5 316 M( or assist in its implementation may be prepared, copied, published) s5 305 M( and distributed, in whole or in part, without restriction of any) s5 294 M( kind, provided that the above copyright notice and this paragraph are) s5 283 M( included on all such copies and derivative works. However, this) s5 272 M( document itself may not be modified in any way, such as by removing) s5 261 M( the copyright notice or references to the Internet Society or other) s5 250 M( Internet organizations, except as needed for the purpose of) s5 239 M( developing Internet standards in which case the procedures for) s5 228 M( copyrights defined in the Internet Standards process must be) s5 217 M( followed, or as required to translate it into languages other than) s5 206 M( English.) s5 184 M( The limited permissions granted above are perpetual and will not be) s5 173 M( revoked by the Internet Society or its successors or assignees.) s5 129 M(Ylonen & Moffat Expires March 2, 2003 [Page 15]) s_RSPStoPSsaved restoreuserdict/PStoPSsaved save putPStoPSmatrix setmatrix595.000000 421.271378 translate90 rotate0.706651 dup scaleuserdict/PStoPSmatrix matrix currentmatrix putuserdict/PStoPSclip{0 0 moveto 595.000000 0 rlineto 0 842.000000 rlineto -595.000000 0 rlineto closepath}put initclipPStoPSxform concat%%BeginPageSetup_S75 0 translate/pagenum 16 def/fname () def/fdir () def/ftail () def/user_header_p false def%%EndPageSetup5 723 M(Internet-Draft SSH Authentication Protocol September 2002) s5 690 M( This document and the information contained herein is provided on an) s5 679 M( "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING) s5 668 M( TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING) s5 657 M( BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION) s5 646 M( HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF) s5 635 M( MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.) s5 602 M(Acknowledgment) s5 580 M( Funding for the RFC Editor function is currently provided by the) s5 569 M( Internet Society.) s5 129 M(Ylonen & Moffat Expires March 2, 2003 [Page 16]) s_RSPStoPSsaved restore%%Trailer%%Pages: 16%%DocumentNeededResources: font Courier-Bold Courier %%EOF⌨️ 快捷键说明
复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?