Package: libgss-opaque-dev Source: libgss-opaque Version: 0.1.0-1 Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 9 Depends: libgss-opaque0 (= 0.1.0-1), libkrb5-dev Filename: amd64/libgss-opaque-dev_0.1.0-1_amd64.deb Size: 2412 MD5sum: dc03f32764c434e827e02a15ca4ca65d SHA1: 445fb658bede707a241ede7914ab8180763b3dd5 SHA256: 317bdefcf3b587268371f3ff87efe0a89c7443ae658d6a106470755a2efd108d Section: libdevel Priority: optional Multi-Arch: same Homepage: https://gitlab.com/apake/libgss-opaque Description: OPAQUE (RFC 9807) GSSAPI mechanism plug-in (development) Development files for libgss-opaque: pkg-config metadata and the internal plug-in API headers needed to build a mechglue-compatible consumer or to add a new credential source. Package: libgss-opaque-tools Source: libgss-opaque Version: 0.1.0-1 Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 158 Depends: libgss-opaque0 (= 0.1.0-1), libc6 (>= 2.34), libopaque0 (>= 1.0.1), libsodium26 (>= 1.0.18), libssh-4 (>= 0.8.4) Recommends: ssh-askpass | ssh-askpass-gnome Filename: amd64/libgss-opaque-tools_0.1.0-1_amd64.deb Size: 25688 MD5sum: ca468e38be384afe5c3d0c93779da37d SHA1: 603875a56977cfbd25492a7731affaf95b989196 SHA256: e2261ab4bad732c530ffc1fa8ab6295ea81d941289ee7c300ad639da8be3edfb Section: admin Priority: optional Multi-Arch: foreign Homepage: https://gitlab.com/apake/libgss-opaque Description: Server-admin and client-side tools for libgss-opaque Command-line utilities shipped alongside the plug-in: . opaque-keytab server-side: init /etc/opaque/master.key + records dir, import/list/remove/verify per-user records opaque-register client-side: register a new OPAQUE credential against an OPAQUE-GSSAPI-aware server (ssh-copy-id analog) opaque-ssh client-side: standalone auth driver (libssh-based) opaque-unregister client-side: self-service account removal opaque-passwd client-side: self-service password change . ssh-askpass is recommended (not required): stock `ssh user@server` integration uses it to prompt for the OPAQUE password when GSSAPIClientIdentity is configured. Package: libgss-opaque-tools-dbgsym Source: libgss-opaque Version: 0.1.0-1 Auto-Built-Package: debug-symbols Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 166 Depends: libgss-opaque-tools (= 0.1.0-1) Filename: amd64/libgss-opaque-tools-dbgsym_0.1.0-1_amd64.deb Size: 74508 MD5sum: b4c67168be70a1ad55a0e41bec5d3baa SHA1: a5b23c9a0c78275ebb3e5c7ea4fbd055c244eb1f SHA256: fa2cc23f9d4bfd02aa0d6f33f0fb7afa689fb3fb19529dce2cab7bbdf02541ce Section: debug Priority: optional Description: debug symbols for libgss-opaque-tools Build-Ids: 42bc9dbae67e984291aa3083b08ff57b96b4752d 4d2520c995498e39072f8507e3ddf1d5f0517983 b7b9ddb705b6b6847ecb72d92a0668051ed6587d de26c120ca4ddf191db369a8eabf370416fb61f9 ed5dfb88b821e6b3830dcef65fc1c12a49122f84 Package: libgss-opaque0 Source: libgss-opaque Version: 0.1.0-1 Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 59 Depends: libc6 (>= 2.33), libgssapi-krb5-2 (>= 1.9.1+dfsg), libopaque0 (>= 1.0.1), libsodium26 (>= 1.0.18) Filename: amd64/libgss-opaque0_0.1.0-1_amd64.deb Size: 18672 MD5sum: ef52762f7994c16c03d688f3434287a8 SHA1: 1f5060817b90dd1800c200b269e566f4c23e8554 SHA256: 093a12e26a7b53deb11456ef15dcbc8cd7fc194c2289cdfbe58ba8a68c95591f Section: net Priority: optional Multi-Arch: same Homepage: https://gitlab.com/apake/libgss-opaque Description: OPAQUE (RFC 9807) GSSAPI mechanism plug-in (runtime) libgss-opaque is a GSSAPI (RFC 2743 / 2744) mechanism plug-in that implements the OPAQUE password-authenticated key exchange protocol (RFC 9807). Once installed, every existing GSSAPI consumer on the host (OpenSSH, OpenLDAP, Postgres, Samba, mod_auth_gssapi, ...) can authenticate users via OPAQUE — server-blind, mutually authenticated, forward-secret — without per-service code changes. . This package ships the runtime plug-in and the mechglue registration file (/etc/gss/mech.d/gssopaque.conf). Package: libgss-opaque0-dbgsym Source: libgss-opaque Version: 0.1.0-1 Auto-Built-Package: debug-symbols Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 61 Depends: libgss-opaque0 (= 0.1.0-1) Filename: amd64/libgss-opaque0-dbgsym_0.1.0-1_amd64.deb Size: 45684 MD5sum: e8387f06309c347896f4ffcf903e0bd6 SHA1: 73986a6af1f1419ea4d4f2876f968983dbae253b SHA256: 0e89004c3992e4e1926273b19cc5c679b63cc767ac9220887353fec7ed88f4af Section: debug Priority: optional Multi-Arch: same Description: debug symbols for libgss-opaque0 Build-Ids: 5fed4eea18baaf488a87bd4daaff72c141f4f3c5 Package: openssh-server-gssapi-opaque Source: openssh-opaque Version: 1:10.5p1-1+opaque1 Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 3905 Depends: libgss-opaque0, libpam-modules, libpam-runtime, openssh-common (<< 1:10.5p1.1), openssh-common (>= 1:10.5p1), openssh-sftp-server, procps, ucf, debconf (>= 0.5) | debconf-2.0, runit-helper (>= 2.14.0~), systemd | systemd-standalone-sysusers | systemd-sysusers, libaudit1 (>= 1:2.2.1), libc6 (>= 2.42), libcom-err2 (>= 1.43.9), libcrypt1 (>= 1:4.1.0), libgssapi-krb5-2 (>= 1.17), libkrb5-3 (>= 1.13~alpha1+dfsg), libpam0g (>= 0.99.7.1), libselinux1 (>= 3.1~), libssl3t64 (>= 3.0.0), libwrap0 (>= 7.6-4~), libwtmpdb0 (>= 0.13.0), zlib1g (>= 1:1.1.4) Recommends: default-logind | logind | libpam-systemd, ncurses-term, passwd, xauth Suggests: molly-guard, monkeysphere, ssh-askpass, ufw Conflicts: openssh-server, openssh-server-gssapi Breaks: runit (<< 2.1.2-51~) Replaces: openssh-server, openssh-server-gssapi, ssh, ssh-krb5 Provides: openssh-server (= 1:10.5p1-1+opaque1), openssh-server-gssapi (= 1:10.5p1-1+opaque1), ssh-server Filename: amd64/openssh-server-gssapi-opaque_10.5p1-1+opaque1_amd64.deb Size: 849176 MD5sum: 75e42adda9eae0581996ff4d8115e552 SHA1: e35a9288e13d426bac0bebb969db0a1a6494e7c3 SHA256: 42fa7203451974a81b6c1afb6ac9bbaf25324c1248945a9e792fa34cf28b875d Section: net Priority: optional Multi-Arch: foreign Homepage: https://www.openssh.com/ Description: secure shell (SSH) server, with OPAQUE GSS-API authentication This is the portable version of OpenSSH, a free implementation of the Secure Shell protocol as specified by the IETF secsh working group. . This package provides a version of the sshd server built with support for GSS-API authentication and key exchange, and additionally with the OPAQUE mechanism (RFC 9807) registered in sshd's mechanism table. OPAQUE is an asymmetric password-authenticated key exchange: the server stores no value that allows an offline dictionary attack, and the password never reaches the server. . sshd matches a client's GSS-API mechanism object identifier against a fixed array compiled into its own binary, so the OPAQUE mechanism cannot be added by configuration alone. That is why this package exists as a separate build rather than as a plug-in only; the mechanism itself is implemented in libgss-opaque0, which this package requires. The ssh client needs no modification, because it reads its mechanism list at run time. . This package conflicts with openssh-server and openssh-server-gssapi. Package: openssh-server-gssapi-opaque-dbgsym Source: openssh-opaque Version: 1:10.5p1-1+opaque1 Auto-Built-Package: debug-symbols Architecture: amd64 Maintainer: Szilárd Pfeiffer Installed-Size: 4134 Depends: openssh-server-gssapi-opaque (= 1:10.5p1-1+opaque1) Filename: amd64/openssh-server-gssapi-opaque-dbgsym_10.5p1-1+opaque1_amd64.deb Size: 3273276 MD5sum: fb32989df69d717d005ecae924bd0e26 SHA1: 9e83a0e3cd65cb6a7808bf5b9d322d5b982b4536 SHA256: 3f14a73f7b2474de7eb163d0774fd8884c37b953492d74db4ebb410a439cbaf1 Section: debug Priority: optional Description: debug symbols for openssh-server-gssapi-opaque Build-Ids: 7d6b8e0880566f73d194e6afb35c850ce573608c 8117ba26f7cb8381d4072cc9401acfa2a60a28ca e5b7dda0c743646723711cc01f27e5a60feb2066