RLOGIN(1) UNIX Reference Manual RLOGIN(1) NNAAMMEE rrllooggiinn - remote login SSYYNNOOPPSSIISS _r_l_o_g_i_n [--88EEKKLLdd] [--ee _c_h_a_r] [--kk _r_e_a_l_m] [--ll _u_s_e_r_n_a_m_e] _h_o_s_t DDEESSCCRRIIPPTTIIOONN RRllooggiinn starts a terminal session on a remote host _h_o_s_t. RRllooggiinn first attempts to use the Kerberos authorization mechanism, described below. If the remote host does not supporting Kerberos the standard Berkeley _r_h_o_s_t_s authorization mechanism is used. The options are as follows: --88 The --88 option allows an eight-bit input data path at all times; otherwise parity bits are stripped except when the remote side's stop and start characters are other than ^S/^Q. --EE The --EE option stops any character from being recognized as an escape character. When used with the --88 option, this provides a completely transparent connection. --KK The --KK option turns off all Kerberos authentication. --LL The --LL option allows the rlogin session to be run in ``litout'' (see tty(4)) mode. --dd The --dd option turns on socket debugging (see setsockopt(2)) on the TCP sockets used for communication with the remote host. --ee The --ee option allows user specification of the escape charac- ter, which is ``~'' by default. This specification may be as a literal character, or as an octal value in the form \nnn. --kk The option requests rlogin to obtain tickets for the remote host in realm _r_e_a_l_m instead of the remote host's realm as determined by krb_realmofhost(3). A line of the form ``.'' disconnects from the remote host. Similarly, the line ``^Z'' will suspend the rrllooggiinn session, and ``'' suspends the send portion of the rlogin, but allows output from the remote system. By default, the tilde (``~'') character is the escape character, and normally control-Y (``^Y'') is the delayed-suspend character. All echoing takes place at the remote site, so that (except for delays) the rrllooggiinn is transparent. Flow control via ^S/^Q and flushing of input and output on interrupts are handled properly. KKEERRBBEERROOSS AAUUTTHHEENNTTIICCAATTIIOONN Each user may have a private authorization list in the file ._k_l_o_g_i_n in their home directory. Each line in this file should contain a Kerberos principal name of the form _p_r_i_n_c_i_p_a_l._i_n_s_t_a_n_c_e@_r_e_a_l_m. If the originating user is authenticated to one of the principals named in ._k_l_o_g_i_n, access is granted to the account. The principal _a_c_c_o_u_n_t_n_a_m_e.@_l_o_c_a_l_r_e_a_l_m is granted access if there is no ._k_l_o_g_i_n file. Otherwise a login and pass- word will be prompted for on the remote machine as in login(1). To avoid certain security problems, the ._k_l_o_g_i_n file must be owned by the remote user. If Kerberos authentication fails, a warning message is printed and the standard Berkeley _r_l_o_g_i_n is used instead. EENNVVIIRROONNMMEENNTT The following environment variable is utilized by rrllooggiinn: TERM to find user's terminal type. SSEEEE AALLSSOO rsh(1), kerberos(3), krb_sendauth(3), krb_realmofhost(3) HHIISSTTOORRYY RRllooggiinn appeared in 4.2 BSD. BBUUGGSS RRllooggiinn will be replaced by telnet(1) in the near future. More of the environment should be propagated.