Return to rlogind.8c CVS log

Up to [Power 6/32 Unix Tahoe 4.2BSD] / cci / usr / src / man / man8

Annotation of cci/usr/src/man/man8/rlogind.8c, revision 1.1.1.1

1.1       root        1: .TH RLOGIND 8C "4 March 1983"
                      2: .UC 4
                      3: .SH NAME
                      4: rlogind \- remote login server
                      5: .SH SYNOPSIS
                      6: .B /etc/rlogind
                      7: [
                      8: .B \-d
                      9: ]
                     10: .SH DESCRIPTION
                     11: .I Rlogind
                     12: is the server for the 
                     13: .IR rlogin (1C)
                     14: program.  The server provides a remote login facility
                     15: with authentication based on privileged port numbers.
                     16: .PP
                     17: .I Rlogind
                     18: listens for service requests at the port indicated in
                     19: the ``login'' service specification; see
                     20: .IR services (5).
                     21: When a service request is received the following protocol
                     22: is initiated:
                     23: .IP 1)
                     24: The server checks the client's source port.
                     25: If the port is not in the range 0-1023, the server
                     26: aborts the connection.
                     27: .IP 2)
                     28: The server checks the client's source address.
                     29: If the address is associated with a host for which no
                     30: corresponding entry exists in the host name data base (see
                     31: .IR hosts (5)),
                     32: the server aborts the connection.
                     33: .PP
                     34: Once the source port and address have been checked, 
                     35: .I rlogind
                     36: allocates a pseudo terminal (see 
                     37: .IR pty (4)),
                     38: and manipulates file descriptors so that the slave
                     39: half of the pseudo terminal becomes the 
                     40: .B stdin ,
                     41: .B stdout ,
                     42: and
                     43: .B stderr 
                     44: for a login process.
                     45: The login process is an instance of the
                     46: .IR login (1)
                     47: program, invoked with the
                     48: .B \-r
                     49: option.  The login process then proceeds with the authentication
                     50: process as described in
                     51: .IR rshd (8C).
                     52: If the remote user has an
                     53: .I equivalent
                     54: account, 
                     55: .I rlogind
                     56: allows the user to log in without giving a password. On the other hand,
                     57: if automatic authentication fails, 
                     58: .I rlogind 
                     59: reprompts the user
                     60: to login as one finds on a standard terminal line.
                     61: .PP
                     62: The parent of the login process manipulates the master side of
                     63: the pseduo terminal, operating as an intermediary
                     64: between the login process and the client instance of the
                     65: .I rlogin
                     66: program.  In normal operation, the packet protocol described
                     67: in
                     68: .IR pty (4)
                     69: is invoked to provide ^S/^Q type facilities and propagate
                     70: interrupt signals to the remote programs.  The login process
                     71: propagates the client terminal's baud rate and terminal type,
                     72: as found in the environment variable, ``TERM''; see
                     73: .IR environ (7).
                     74: .PP
                     75: If a session is inactive for more than 5 minutes, 
                     76: .I rlogind
                     77: terminates the session unless the remote host name is in the file
                     78: .I /etc/keeprlogin.
                     79: However, all sessions can be inactive for at most half an hour.
                     80: A session is inactive if there is no terminal I/Os.
                     81: .SH FORMAT OF /etc/keeprlogin
                     82: Each entry line in 
                     83: .I /etc/keeprlogin 
                     84: is an 
                     85: .I official 
                     86: name of the remote host from which inactive sessions are allowed to
                     87: last half an hour.
                     88: .SH DIAGNOSTICS
                     89: All diagnostic messages are returned on the connection
                     90: associated with the
                     91: .BR stderr ,
                     92: after which any network connections are closed.
                     93: An error is indicated by a leading byte with a value of 1.
                     94: .PP
                     95: .B ``Hostname for your address unknown.''
                     96: .br
                     97: No entry in the host name database existed for
                     98: the client's machine.
                     99: .PP
                    100: .B ``Try again.''
                    101: .br
                    102: A
                    103: .I fork
                    104: by the server failed.
                    105: .PP
                    106: .B ``/bin/sh: ...''
                    107: .br
                    108: The user's login shell could not be started.
                    109: .SH SEE ALSO
                    110: rshd(8C)
                    111: .SH BUGS
                    112: The authentication procedure used here assumes the integrity
                    113: of each client machine and the connecting medium.  This is
                    114: insecure, but is useful in an ``open'' environment.
                    115: .PP
                    116: .I Rlogind
                    117: supports at most 64 remote users.
                    118: It uses pseudo-terminals /dev/pty[pqrs][0-9a-f].
                    119: .PP
                    120: A facility to allow all data exchanges to be encrypted should be
                    121: present.

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.