|
|
1.1 root 1: .\" Copyright (c) 1983, 1990 The Regents of the University of California.
2: .\" All rights reserved.
3: .\"
4: .\" Redistribution and use in source and binary forms are permitted provided
5: .\" that: (1) source distributions retain this entire copyright notice and
6: .\" comment, and (2) distributions including binaries display the following
7: .\" acknowledgement: ``This product includes software developed by the
8: .\" University of California, Berkeley and its contributors'' in the
9: .\" documentation or other materials provided with the distribution and in
10: .\" all advertising materials mentioning features or use of this software.
11: .\" Neither the name of the University nor the names of its contributors may
12: .\" be used to endorse or promote products derived from this software without
13: .\" specific prior written permission.
14: .\" THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
15: .\" WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
16: .\" MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
17: .\"
18: .\" @(#)rlogin.1 6.16 (Berkeley) 7/24/90
19: .\"
20: .Dd July 24, 1990
21: .Dt RLOGIN 1
22: .Os BSD 4.2
23: .Sh NAME
24: .Nm rlogin
25: .Nd remote login
26: .Sh SYNOPSIS
27: .Ar rlogin
28: .Op Fl 8KLdx
29: .Op Fl e Ar char
30: .Op Fl k Ar realm
31: .Op Fl l Ar username
32: .Ar host
33: .Sh DESCRIPTION
34: .Nm Rlogin
35: starts a terminal session on a remote host
36: .Ar host .
37: .Pp
38: .Nm Rlogin
39: first attempts to use the Kerberos authorization mechanism, described below.
40: If the remote host does not supporting Kerberos the standard Berkeley
41: .Pa rhosts
42: authorization mechanism is used.
43: The options are as follows:
44: .Tw Fl
45: .Tp Fl 8
46: The
47: .Fl 8
48: option allows an eight-bit input data path at all times; otherwise
49: parity bits are stripped except when the remote side's stop and start
50: characters are other than ^S/^Q.
51: Eight-bit mode is the default.
52: .Tp Fl K
53: The
54: .Fl K
55: option turns off all Kerberos authentication.
56: .Tp Fl L
57: The
58: .Fl L
59: option allows the rlogin session to be run in ``litout'' (see
60: .Xr tty 4 )
61: mode.
62: .Tp Fl d
63: The
64: .Fl d
65: option turns on socket debugging (see
66: .Xr setsockopt 2 )
67: on the TCP sockets used for communication with the remote host.
68: .Tp Fl e
69: By default, the tilde (``~'') character is the escape character.
70: The
71: .Fl e
72: option allows specification of a different escape character.
73: .Tp Fl k
74: The
75: .FL k
76: option requests rlogin to obtain tickets for the remote host
77: in realm
78: .Ar realm
79: instead of the remote host's realm as determined by
80: .Xr krb_realmofhost 3 .
81: .Tp Fl x
82: The
83: .Fl x
84: option turns on DES encryption for all data passed via the
85: rlogin session.
86: This may impact response time and CPU utilization, but provides
87: increased security.
88: .Tp
89: .Pp
90: A line of the form ``~.'' disconnects from the remote host, where ``~''
91: is the escape character.
92: Similarly, the line ``~^Z'' will suspend the
93: .Nm rlogin
94: session.
95: Substitution of the delayed-suspend character (normally ^Y) for the
96: suspend character suspends the send portion of the rlogin, but allows
97: output from the remote system.
98: .Pp
99: All echoing takes place at the remote site, so that (except for delays)
100: the
101: .Nm rlogin
102: is transparent.
103: Flow control via ^S/^Q and flushing of input and output on interrupts
104: are handled properly.
105: .Sh KERBEROS AUTHENTICATION
106: Each user may have a private authorization list in the file
107: .Pa .klogin
108: in their home directory.
109: Each line in this file should contain a Kerberos principal name of the
110: form
111: .Ar principal.instance@realm .
112: If the originating user is authenticated to one of the principals named
113: in
114: .Pa .klogin ,
115: access is granted to the account.
116: The principal
117: .Ar accountname.@localrealm
118: is granted access if
119: there is no
120: .Pa .klogin
121: file.
122: Otherwise a login and password will be prompted for on the remote machine
123: as in
124: .Xr login 1 .
125: To avoid certain security problems, the
126: .Pa .klogin
127: file must be owned by
128: the remote user.
129: .Pp
130: If Kerberos authentication fails, a warning message is printed and the
131: standard Berkeley
132: .Em rlogin
133: is used instead.
134: .Sh ENVIRONMENT
135: The following environment variable is utilized by
136: .Nm rlogin :
137: .Tw Fl
138: .Tp Ev TERM
139: to find user's terminal type.
140: .Tp
141: .Sh SEE ALSO
142: .Xr rsh 1 ,
143: .Xr kerberos 3 ,
144: .Xr krb_sendauth 3 ,
145: .Xr krb_realmofhost 3
146: .Sh HISTORY
147: .Nm Rlogin
148: appeared in 4.2 BSD.
149: .Sh BUGS
150: .Nm Rlogin
151: will be replaced by
152: .Xr telnet 1
153: in the near future.
154: .Pp
155: More of the environment should be propagated.
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.