|
|
BSD 4.3reno
RLOGIN(1) UNIX Reference Manual RLOGIN(1)
NNAAMMEE
rrllooggiinn - remote login
SSYYNNOOPPSSIISS
_r_l_o_g_i_n [--88KKLLddxx] [--ee _c_h_a_r] [--kk _r_e_a_l_m] [--ll _u_s_e_r_n_a_m_e] _h_o_s_t
DDEESSCCRRIIPPTTIIOONN
RRllooggiinn starts a terminal session on a remote host _h_o_s_t.
RRllooggiinn first attempts to use the Kerberos authorization mechanism,
described below. If the remote host does not supporting Kerberos the
standard Berkeley _r_h_o_s_t_s authorization mechanism is used. The options
are as follows:
--88 The --88 option allows an eight-bit input data path at all times;
otherwise parity bits are stripped except when the remote
side's stop and start characters are other than ^S/^Q. Eight-
bit mode is the default.
--KK The --KK option turns off all Kerberos authentication.
--LL The --LL option allows the rlogin session to be run in ``litout''
(see tty(4)) mode.
--dd The --dd option turns on socket debugging (see setsockopt(2)) on
the TCP sockets used for communication with the remote host.
--ee By default, the tilde (``~'') character is the escape charac-
ter. The --ee option allows specification of a different escape
character.
--kk The option requests rlogin to obtain tickets for the remote
host in realm _r_e_a_l_m instead of the remote host's realm as
determined by krb_realmofhost(3).
--xx The --xx option turns on DES encryption for all data passed via
the rlogin session. This may impact response time and CPU
utilization, but provides increased security.
A line of the form ``~.'' disconnects from the remote host, where ``~''
is the escape character. Similarly, the line ``~^Z'' will suspend the
rrllooggiinn session. Substitution of the delayed-suspend character (normally
^Y) for the suspend character suspends the send portion of the rlogin,
but allows output from the remote system.
All echoing takes place at the remote site, so that (except for delays)
the rrllooggiinn is transparent. Flow control via ^S/^Q and flushing of input
and output on interrupts are handled properly.
KKEERRBBEERROOSS AAUUTTHHEENNTTIICCAATTIIOONN
Each user may have a private authorization list in the file ._k_l_o_g_i_n in
their home directory. Each line in this file should contain a Kerberos
principal name of the form _p_r_i_n_c_i_p_a_l._i_n_s_t_a_n_c_e@_r_e_a_l_m. If the originating
user is authenticated to one of the principals named in ._k_l_o_g_i_n, access
is granted to the account. The principal _a_c_c_o_u_n_t_n_a_m_e.@_l_o_c_a_l_r_e_a_l_m is
granted access if there is no ._k_l_o_g_i_n file. Otherwise a login and pass-
word will be prompted for on the remote machine as in login(1). To avoid
certain security problems, the ._k_l_o_g_i_n file must be owned by the remote
user.
If Kerberos authentication fails, a warning message is printed and the
standard Berkeley _r_l_o_g_i_n is used instead.
EENNVVIIRROONNMMEENNTT
The following environment variable is utilized by rrllooggiinn:
TERM to find user's terminal type.
SSEEEE AALLSSOO
rsh(1), kerberos(3), krb_sendauth(3), krb_realmofhost(3)
HHIISSTTOORRYY
RRllooggiinn appeared in 4.2 BSD.
BBUUGGSS
RRllooggiinn will be replaced by telnet(1) in the near future.
More of the environment should be propagated.
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.