>~ : manos 1:44pm > klog
>Password:
>~ : manos 1:44pm > tokens
>
>Tokens held by the Cache Manager:
>
>User's (AFS ID 30379) tokens for [EMAIL PROTECTED] [Expires Dec  1 15:10]
>   --End of list--
>~ : manos 1:44pm > which rlogin
>/usr/ucb/rlogin
>~ : manos 1:44pm > rlogin cn10
>AFS (R) 3.3 Login
>~ : cn10 1:44pm > /usr/ciesin/afs/bin/tokens
>
>Tokens held by the Cache Manager:
>
>   --End of list--
>~ : cn10 1:44pm > 
>---------------------------------------------------------------------------
>
>   Am I missing something here?  Am I mistaken as to my thoughts of what
>   the purpose of these AFS utilities is?  Do others experience this same
>   thing?  I've checked and re-checked to be sure the AFS versions of those
>   binaries are the ones which are running.

Maybe, but the Transarc-provided versions don't do it.


Excerpts from internet.info-afs: 30-Nov-94 Hmm.  AFS r-commands, new p..
by Jeff [EMAIL PROTECTED] 
>    Now, by all means correct me if I am wrong, but isn't the whole 
>    point of having a kerberized in.rlogind, in.rexecd, rsh, login, and rcp 
>    that authentication will be passed along?  Maybe not the WHOLE point, 
>    but surely a large one.
 
Derrick has exactly summarized a situation which causes a lot of trouble at
our site: 

"Maybe, but the Transarc-provided versions don't do it."

Just to clarify the example above:
Even if one part (the Transarc version of rlogind) is willing to receive
a token you can't send it by /usr/ucb/rlogin because it does not know 
anything about token passing.
As far as I know Transarc does not see any need to provide token passing
for rlogin. Transarc recommends to use rsh instead of rlogin :-(

Werner

-- 
============================================================================
Werner Baur
Leibniz-Rechenzentrum     X.400:  S=Baur;OU=lrz;P=lrz-muenchen;A=d400;C=de
Barer Str. 21            RFC822:  [EMAIL PROTECTED]
D-80333 Muenchen           Tel.:  ++49-89-2105-8781
Germany                     Fax:  ++49-89-2809460
============================================================================

Reply via email to