kftgtd(8)

NAME

kftgtd - Server for kftgt, a Kerberos v4 ticket forwarding

utility

SYNOPSIS

kftgtd

DESCRIPTION

kftgtd is the server for kftgt. It accepts forwarded Ker

beros v4 ticket-granting tickets and saves them for later use by

a login session. Access checking is done the same as Kerberos v4

klogind(8).

See kftgt(1) for more information about kftgt and other

warnings and caveats about this service.

kftgtd should be started from inetd and must be run as

root or be installed setuid root as it needs to be able to read

the system srvtab file and change its UID to create tickets. A

typical inetd.conf entry looks like:

kftgtd stream tcp nowait root /usr/sbin/tcpd /usr/lo

cal/sbin/kftgtd

You will also need the corresponding entry in /etc/ser

vices:

kftgt 2109/tcp kftgtd # Kerberos TGT

forwarding svc.

kftgtd times out in 60 seconds if the transaction is not

completed.

kftgtd must be running on a machine that is registered for

rlogin service; that is, the host must have a srvtab containing

an rcmd.<host> key where <host> is the value returned by the

krb_get_phost(3) Kerberos library call.

AUTHOR

Roland J. Schemers <schemers@stanford.edu>.

kftgt and kftgtd continue to be maintained by the Kerberos

team at Stanford University, although no major changes in the

functionality of these programs are planned. Questions and bug

reports may be sent to Russ Allbery <rra@stanford.edu>, but

please be aware that we only support Stanford affiliates and may

not be able to help with problems at other sites.

LICENSE

Copyright 1994, 1997, 2001 Board of Trustees, Leland Stan

ford Jr. University

All rights reserved.

Export of this software from the United States of America

may require a specific license from the United States Government.

It is the responsibility of any person or organization contem

plating export to obtain such a license before exporting.

WITHIN THAT CONSTRAINT, permission to use, copy, modify,

and distribute this software and its documentation for any pur

pose and without fee is hereby granted, provided that the above

copyright notice appear in all copies and that both that copy

right notice and this permission notice appear in supporting doc

umentation, and that the name of Stanford University not be used

in advertising or publicity pertaining to distribution of the

software without specific, written prior permission. Stanford

University makes no representations about the suitability of this

software for any purpose. It is provided "as is" without express

or implied warranty.

THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS

OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED

WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PUR

POSE.

SEE ALSO

kftgt(1), inetd(8), kerberos(1)

1.12 2005-05-21

KFTGTD(8)