>  The AFS kaserver ignores the IP address in the TGT, so you can pick it up
>  and move it to another machine if you so desire. I use a modified version of
>  the ta-rauth code in the Transarc inetd.afs and rcmd() call. I think their
>  code only works on IBM or some such, mine works on all the AFS supported
>  platforms. Besides passing the afs token like the Transarc code, you can
>  optionaly pass the TGT along as well. I have put the code in rlogin,
>  rsh/rcp/rdist, and telnet, which can do various combinations of regular, V4,
>  or encrypted V4 authentication. The -f flag forwards the TGT, the token
>  defaults to being passed since with AFS home directories you need it. The -f
>  option is helpful for our authenticated printing, zephyr, and various other
>  services that would otherwise require a password. 

If anyone cares you can find copies of the telnet, and rcommands we use at CMU
(Computing Services) which do encrypted ticket passing,
http://andrew2.andrew.cmu.edu/dist

-D

Reply via email to