[2123] in Info-AFS_Redistribution

home help back first fref pref prev next nref lref last post

Re: forwarding authentication with rcommands?

daemon@ATHENA.MIT.EDU (John Gardiner Myers)
Sun Oct 24 13:21:24 1993

Date: Sun, 24 Oct 1993 12:43:27 -0400 (EDT)
From: John Gardiner Myers <jgm+@cmu.edu>
To: Info-AFS-kerberos@transarc.com
In-Reply-To: <8gmeJoi00WD5Nir6UR@andrew.cmu.edu>

a) They're different protocols.

b) They send your afs token across the network connection in the
clear.

There are four different rsh protocols, for each combination of
"authentication method" and "forwards tokens".

1) Vanilla rsh, .rhosts authentication, does not forward tokens
2) MIT Kerberos rsh, Kerberos authentication, does not forward tokens
3) Transarc rsh, .rhosts authentcation, forwards afs token
4) CMU rsh, Kerberos authentication, forwards krbtgt token

Each also have a corresponding "rlogin" protocol.  (2) and (4) also
have a corresponding "encrypted rlogin" protocol.

				_.John

home help back first fref pref prev next nref lref last post