[8028] in Kerberos
Re: Help --- rlogin -x works one way only
daemon@ATHENA.MIT.EDU (Christoph Hoegl)
Wed Sep 18 18:18:06 1996
To: pcl@sable.ox.ac.uk (Paul Leyland)
In-Reply-To: pcl's message of 18 Sep 1996 17:19:03 +0000.
<PCL.96Sep18181903@sable.ox.ac.uk>
Cc: kerberos@MIT.EDU
Date: Wed, 18 Sep 1996 23:59:24 +0200
From: Christoph Hoegl <darkwing@bsdd.regensburg.com>
> =
> I've just installed and set up K5B7 on a DEC Ultrix 4.5 KDC and with
> an Ultrix 4.3a client. This is an experimental setup to enable a few
> of us to explore Kerberos and what it might be able to do for us. The
> build and install seemed to go reasonably well.
> =
> The present state of play is that I can kinit as myself, pcl@OX.AC.UK,
> on the client and then successfully get an encrypted rlogin session to
> the KDC.
> =
> I cannot get an encrypted session the other way, from the server to the=
> client. A transcript of a sample session is:
> =
> % kinit pcl
> Password for pcl@OX.AC.UK: =
> % klist
> Ticket cache: /tmp/krb5cc_ttyp1
> Default principal: pcl@OX.AC.UK
> =
> Valid starting Expires Service principal
> 18 Sep 96 18:05:54 19 Sep 96 04:05:47 krbtgt/OX.AC.UK@OX.AC.UK
> % whoami
> pcl
> % usr/local/bin/rlogin foo.oucs.ox.ac.uk -x
> foo.oucs.ox.ac.uk: Connection refused
> rlogin: kcmd to host foo.oucs.ox.ac.uk failed - Unknown code ____ 2=
55
> =
> foo.oucs.ox.ac.uk is my client machine and that session is running on
> the server with an encrypted session from my client.
> =
> I believe that I have correctly created a host/foo.oucs.ox.ac.uk
> principal and created a /etc/v5srvtab file on the client machine.
> Any suggestions as to where I may be going wrong?
> Responses by email or follow-up are fine.
> Paul
There client and server have to be able to encrypt
your KDC ist able to -> it=B4s telnetd allows to encrypt
your clientmachine doesn=B4t support the encryption and/or couldn=B4t fin=
d the =
right port/programm
Have a look at your inetd.conf / services
and the file ${KERBEROS}/doc/install.{dvi,info}
e.g.
/etc/services
eklogin 2105/tcp # Kerberos encrypted rlogin
/etc/inetd.conf
eklogin stream tcp nowait root /usr/local/sbin/klogind klogind -=
k -c =
-e
Christoph
-- =
Christoph Hoegl / darkwing@bsdd.regensburg.com / (Darkwing@berkeley.edu)
Siedlungsstr. 18 93128 Regenstauf Germany Fax:+49 940270611
Tellerrd. 12a 93720 Berkeley CA USA Fax:+1 (510) 642 1043
