|
|
1.1 ! root 1: .TH RLOGIND 8C "4 March 1983" ! 2: .UC 4 ! 3: .SH NAME ! 4: rlogind \- remote login server ! 5: .SH SYNOPSIS ! 6: .B /etc/rlogind ! 7: [ ! 8: .B \-d ! 9: ] ! 10: .SH DESCRIPTION ! 11: .I Rlogind ! 12: is the server for the ! 13: .IR rlogin (1C) ! 14: program. The server provides a remote login facility ! 15: with authentication based on privileged port numbers. ! 16: .PP ! 17: .I Rlogind ! 18: listens for service requests at the port indicated in ! 19: the ``login'' service specification; see ! 20: .IR services (5). ! 21: When a service request is received the following protocol ! 22: is initiated: ! 23: .IP 1) ! 24: The server checks the client's source port. ! 25: If the port is not in the range 0-1023, the server ! 26: aborts the connection. ! 27: .IP 2) ! 28: The server checks the client's source address. ! 29: If the address is associated with a host for which no ! 30: corresponding entry exists in the host name data base (see ! 31: .IR hosts (5)), ! 32: the server aborts the connection. ! 33: .PP ! 34: Once the source port and address have been checked, ! 35: .I rlogind ! 36: allocates a pseudo terminal (see ! 37: .IR pty (4)), ! 38: and manipulates file descriptors so that the slave ! 39: half of the pseudo terminal becomes the ! 40: .B stdin , ! 41: .B stdout , ! 42: and ! 43: .B stderr ! 44: for a login process. ! 45: The login process is an instance of the ! 46: .IR login (1) ! 47: program, invoked with the ! 48: .B \-r ! 49: option. The login process then proceeds with the authentication ! 50: process as described in ! 51: .IR rshd (8C). ! 52: If the remote user has an ! 53: .I equivalent ! 54: account, ! 55: .I rlogind ! 56: allows the user to log in without giving a password. On the other hand, ! 57: if automatic authentication fails, ! 58: .I rlogind ! 59: reprompts the user ! 60: to login as one finds on a standard terminal line. ! 61: .PP ! 62: The parent of the login process manipulates the master side of ! 63: the pseduo terminal, operating as an intermediary ! 64: between the login process and the client instance of the ! 65: .I rlogin ! 66: program. In normal operation, the packet protocol described ! 67: in ! 68: .IR pty (4) ! 69: is invoked to provide ^S/^Q type facilities and propagate ! 70: interrupt signals to the remote programs. The login process ! 71: propagates the client terminal's baud rate and terminal type, ! 72: as found in the environment variable, ``TERM''; see ! 73: .IR environ (7). ! 74: .PP ! 75: If a session is inactive for more than 5 minutes, ! 76: .I rlogind ! 77: terminates the session unless the remote host name is in the file ! 78: .I /etc/keeprlogin. ! 79: However, all sessions can be inactive for at most half an hour. ! 80: A session is inactive if there is no terminal I/Os. ! 81: .SH FORMAT OF /etc/keeprlogin ! 82: Each entry line in ! 83: .I /etc/keeprlogin ! 84: is an ! 85: .I official ! 86: name of the remote host from which inactive sessions are allowed to ! 87: last half an hour. ! 88: .SH DIAGNOSTICS ! 89: All diagnostic messages are returned on the connection ! 90: associated with the ! 91: .BR stderr , ! 92: after which any network connections are closed. ! 93: An error is indicated by a leading byte with a value of 1. ! 94: .PP ! 95: .B ``Hostname for your address unknown.'' ! 96: .br ! 97: No entry in the host name database existed for ! 98: the client's machine. ! 99: .PP ! 100: .B ``Try again.'' ! 101: .br ! 102: A ! 103: .I fork ! 104: by the server failed. ! 105: .PP ! 106: .B ``/bin/sh: ...'' ! 107: .br ! 108: The user's login shell could not be started. ! 109: .SH SEE ALSO ! 110: rshd(8C) ! 111: .SH BUGS ! 112: The authentication procedure used here assumes the integrity ! 113: of each client machine and the connecting medium. This is ! 114: insecure, but is useful in an ``open'' environment. ! 115: .PP ! 116: .I Rlogind ! 117: supports at most 64 remote users. ! 118: It uses pseudo-terminals /dev/pty[pqrs][0-9a-f]. ! 119: .PP ! 120: A facility to allow all data exchanges to be encrypted should be ! 121: present.
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.