|
|
1.1 ! root 1: .\" Copyright (c) 1983 Regents of the University of California. ! 2: .\" All rights reserved. The Berkeley software License Agreement ! 3: .\" specifies the terms and conditions for redistribution. ! 4: .\" ! 5: .\" @(#)rlogind.8c 6.3 (Berkeley) 5/24/86 ! 6: .\" ! 7: .TH RLOGIND 8C "May 24, 1986" ! 8: .UC 5 ! 9: .SH NAME ! 10: rlogind \- remote login server ! 11: .SH SYNOPSIS ! 12: .B /etc/rlogind ! 13: [ ! 14: .B \-d ! 15: ] ! 16: .SH DESCRIPTION ! 17: .I Rlogind ! 18: is the server for the ! 19: .IR rlogin (1C) ! 20: program. The server provides a remote login facility ! 21: with authentication based on privileged port numbers from trusted hosts. ! 22: .PP ! 23: .I Rlogind ! 24: listens for service requests at the port indicated in ! 25: the ``login'' service specification; see ! 26: .IR services (5). ! 27: When a service request is received the following protocol ! 28: is initiated: ! 29: .IP 1) ! 30: The server checks the client's source port. ! 31: If the port is not in the range 0-1023, the server ! 32: aborts the connection. ! 33: .IP 2) ! 34: The server checks the client's source address ! 35: and requests the corresponding host name (see ! 36: .IR gethostbyaddr (3N), ! 37: .IR hosts (5) ! 38: and ! 39: .IR named (8)). ! 40: If the hostname cannot be determined, ! 41: the dot-notation representation of the host address is used. ! 42: .PP ! 43: Once the source port and address have been checked, ! 44: .I rlogind ! 45: allocates a pseudo terminal (see ! 46: .IR pty (4)), ! 47: and manipulates file descriptors so that the slave ! 48: half of the pseudo terminal becomes the ! 49: .B stdin , ! 50: .B stdout , ! 51: and ! 52: .B stderr ! 53: for a login process. ! 54: The login process is an instance of the ! 55: .IR login (1) ! 56: program, invoked with the ! 57: .B \-r ! 58: option. The login process then proceeds with the authentication ! 59: process as described in ! 60: .IR rshd (8C), ! 61: but if automatic authentication fails, it reprompts the user ! 62: to login as one finds on a standard terminal line. ! 63: .PP ! 64: The parent of the login process manipulates the master side of ! 65: the pseduo terminal, operating as an intermediary ! 66: between the login process and the client instance of the ! 67: .I rlogin ! 68: program. In normal operation, the packet protocol described ! 69: in ! 70: .IR pty (4) ! 71: is invoked to provide ^S/^Q type facilities and propagate ! 72: interrupt signals to the remote programs. The login process ! 73: propagates the client terminal's baud rate and terminal type, ! 74: as found in the environment variable, ``TERM''; see ! 75: .IR environ (7). ! 76: The screen or window size of the terminal is requested from the client, ! 77: and window size changes from the client are propagated to the pseudo terminal. ! 78: .SH DIAGNOSTICS ! 79: All diagnostic messages are returned on the connection ! 80: associated with the ! 81: .BR stderr , ! 82: after which any network connections are closed. ! 83: An error is indicated by a leading byte with a value of 1. ! 84: .PP ! 85: .B ``Try again.'' ! 86: .br ! 87: A ! 88: .I fork ! 89: by the server failed. ! 90: .PP ! 91: .B ``/bin/sh: ...'' ! 92: .br ! 93: The user's login shell could not be started. ! 94: .SH BUGS ! 95: The authentication procedure used here assumes the integrity ! 96: of each client machine and the connecting medium. This is ! 97: insecure, but is useful in an ``open'' environment. ! 98: .PP ! 99: A facility to allow all data exchanges to be encrypted should be ! 100: present. ! 101: .PP ! 102: A more extensible protocol should be used.
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.