From owner-freebsd-current@FreeBSD.ORG Fri Jul 25 13:55:19 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB81337B40F for ; Fri, 25 Jul 2003 13:55:19 -0700 (PDT) Received: from kientzle.com (h-66-166-149-50.SNVACAID.covad.net [66.166.149.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0825C43FCB for ; Fri, 25 Jul 2003 13:55:19 -0700 (PDT) (envelope-from kientzle@acm.org) Received: from acm.org (ugly.x.kientzle.com [66.166.149.53]) by kientzle.com (8.12.9/8.12.9) with ESMTP id h6PKtAsE036711; Fri, 25 Jul 2003 13:55:11 -0700 (PDT) (envelope-from kientzle@acm.org) Message-ID: <3F219933.4090807@acm.org> Date: Fri, 25 Jul 2003 13:55:15 -0700 From: Tim Kientzle User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.0.1) Gecko/20021005 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Lowell Gilbert References: <20030725214646.C89556@news1.macomnet.ru> <447k66s6i2.fsf@be-well.ilk.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-current@freebsd.org Subject: Re: "authenticated tftp" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: kientzle@acm.org List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jul 2003 20:55:20 -0000 >>On Fri, 25 Jul 2003, 13:22-0400, Robert Watson wrote: >>>Yeah, seems like an oxy-moron, but this is a legitimate question, I >>>promise. My linksys wireless router requires me to disable the admin >>>password on it to tftp a firmware update to it--however, the Windows tftp >>>client that Linksys ships appear to support some form of "Oh yeah, and >>>here's a password". I found some code that claims to implement this extension (specifically for communicating with a Linksys device). Unfortunately, I couldn't find any copyright or license for the code, so I can't just pass it along. However, it looks like it just attaches an option called "password" whose value is the unencrypted password. RFC 2347 describes the format of TFTP options. Looks like a few lines added to makerequest() in tftp.c should handle it. Plus a few additional lines of code for the command-line option. Should be an evening's work for someone. Good luck, Tim