[1484] in Kerberos
How to use Kerberos from batch scripts
daemon@ATHENA.MIT.EDU (Steve Clark)
Wed Jul 31 17:07:24 1991
Date: 31 Jul 91 15:36:15 GMT
From: seclark@iscnvx.lmsc.lockheed.com (Steve Clark)
Reply-To: iscnvx!seclark@shelby.MIT.EDU (Steve Clark)
To: kerberos@shelby.Stanford.EDU
Goal:
I want to issue rcmds from a machine called "butch" via a batch
shell script to a machine called "mrbill".
Problem:
Since authentication is done with service keys (not user passwords) in
the local /etc/srvtab file, I used the program ksrvtgt specifying
names and instances such as rcmd.butch or me.butch, but couldn't
do the rcmd to mrbill. I did however get a rcmd.mrbill ticket.
I quess it isn't clear to me how to use ksrvtgt. What do I need to do?
The shell script executed was:
cd /usr/kerberos
ls -l
ksrvtgt rcmd butch
klist
rsh mrbill hostname
klist
The following is the output from the shell script:
===============================================================================
From daemon Wed Jul 31 07:07:03 1991
To: seclark
Subject: Output from "at" job
Your "at" job "660" produced the following output:
total 480
-r-xr-xr-x 1 seclark 24576 Jul 30 15:03 kdestroy
-r-xr-xr-x 1 seclark 57344 Jul 30 15:03 kinit
-r-xr-xr-x 1 seclark 32768 Jul 30 15:03 klist
-r-xr-xr-x 1 seclark 90112 Jul 30 15:04 kpasswd
-r-xr-xr-x 1 seclark 57344 Jul 30 15:03 ksrvtgt
-r-sr-xr-x 1 root 90112 Jul 30 15:01 rcp
-r-sr-xr-x 1 root 73728 Jul 30 15:02 rlogin
-r-sr-xr-x 1 root 65536 Jul 30 15:01 rsh
Ticket file: /tmp/tkt629
Principal: rcmd.butch@IS.LMSC.LOCKHEED.COM
Issued Expires Principal
Jul 31 07:07:01 Jul 31 07:12:01 krbtgt.IS.LMSC.LOCKHEED.COM@IS.LMSC.LOCKHEED.COM
Permission denied.
rsh: Kerberos rcmd failed: rcmd protocol failure.
trying normal rsh (/usr/ucb/rsh.ucb)
exec: No such file or directory
Ticket file: /tmp/tkt629
Principal: rcmd.butch@IS.LMSC.LOCKHEED.COM
Issued Expires Principal
Jul 31 07:07:01 Jul 31 07:12:01 krbtgt.IS.LMSC.LOCKHEED.COM@IS.LMSC.LOCKHEED.COM
Jul 31 07:07:02 Jul 31 07:12:02 rcmd.mrbill@IS.LMSC.LOCKHEED.COM
===============================================================================
Thanks.
Steve Clark
seclark@iscnvx.lmsc.lockheed.com
