kinit sending clear text password

Mike Dopheide dopheide at ncsa.uiuc.edu
Wed Apr 21 11:46:36 EDT 2004


I've seen this happen with a Java-based 'kinit'.  For instance, I have 
a 'j2sdk1.4.2/bin/kinit' that echos my password as I type it (needless 
to say, it's not in my PATH).  I'm not sure if that's what ships with 
Solaris or not.  

-Mike

> I'm just using the kinit that comes from sun I'm not programming yet
> by seeing I meant being able to see the typed in password when I
> snooped or used ethereal.
> r-xr-xr-x   1 root     bin        15768 Sep  8  2003 /usr/bin/kinit
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 

-- 




More information about the Kerberos mailing list