[2186] in Kerberos
Re: Kerberos' rlogin, and Thanks.
daemon@ATHENA.MIT.EDU (Steve Dyer)
Thu Sep 10 15:05:43 1992
Date: 10 Sep 92 17:38:49 GMT
From: dyer@spdcc.com (Steve Dyer)
To: kerberos@shelby.Stanford.EDU
In article <1992Sep10.160402.16410@syl.dl.nec.com> yuan@syl.dl.nec.com (Ruixi Yuan) writes:
>The kerberos' rlogin program is running now.
>
>However, there is a warning message:
>
> Warning: No Kerberos tickets obtained.
>
>displayed after the rlogin. Does this mean the rlogin session is not
>authenticated?
It means you don't have a Kerberos TGT which you can use on the host you
logged into. You'd have to get a new one using "kinit" (unfortunately
exposing your password over the net). In version 4, the ticket contains
the single IP address from which it may be used, and therefore, tickets
can't be forwarded to other hosts to be used there. In version 5, there
is the capability to allow a list of addresses from which a ticket may be
used or (if my memory serves me) an indication that the ticket may be used
without regard to the host from which it's used.
--
Steve Dyer
dyer@ursa-major.spdcc.com aka {ima,harvard,rayssd,linus,m2c}!spdcc!dyer
