Random Ident server (ridentd)

This server application is meant for the totally paranoid that need access to servers that require ident and don't want to give any information about local users to the remote server or its other users.

Ridentd is a stand-alone replacement for identd that uses a random selection of a ispell dictionary to use as fake ident responses. The ident response is based on a (one-time randomly initialized) modulus of the local port in order to assure that one session will return the same identity during a TCP session.

The really paranoid may wish to start ridentd a few times a day from their cron in order to reseed both the random set of dictionary words and the port modulo. When using in the cron it is adviced to use the 'SILENT' option.

At this moment this software should be considdered release-ready for the Linux platform, beta for any other *nix platform. It depends on the availability of the 'strings' , 'ps' binaries, and the pressence of at least one ispell dictionary file.

Download Version 0.9.3b

If you are using a version of ridentd lower than 0.9.3b, please upgrade to version 0.9.3b. The patch of a localy exploitable symlink atack bug found in 0.9.1b ,that was claimed to be fixed in the 0.9.2b release was found to still exist under specific race conditions by Dominik Vogt. Dominik assisted in geting the issue resolved in a more fundamantal way and I am confident that it is now finaly and completely fixed.


Please send reports and patches for other platforms to rmeijer@xs4all.nl
Rob J Meijer 02/2001