*BSD News Article 77708


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!news.sdsmt.edu!news.mid.net!mr.net!www.nntp.primenet.com!nntp.primenet.com!newspump.sol.net!news.inc.net!news.us.world.net!ns2.mainstreet.net!news.roble.com!not-for-mail
From: marquis@roble.com (Roger Marquis)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: s/key broken?
Date: 7 Sep 1996 18:16:52 GMT
Organization: Roble Systems (http://www.roble.com)
Lines: 11
Message-ID: <50se6k$bcc@alba.roble.com>
References: <50i2q9$o64@alba.roble.com> <50lvdd$php@uriah.heep.sax.de>
NNTP-Posting-Host: roble.com
X-Newsreader: TIN [UNIX 1.3 950824BETA PL0]

J Wunsch (j@uriah.heep.sax.de) wrote:
>Remember, the key(1) program cannot verify your secret password, it is
>only translating it into the S/Key password.

That was the problem, I wasn't using the same secret password.  Works
great now.  Perhaps it wasn't clearly documented but the secret
password is unrelated to anything other than generating keys.  The same
secret password must be used with 'keyinit' and 'key' though there's no
way to verify it without trying the S/Key password.

Roger Marquis