PreviousNext

k5dcelogin(8sec)

Promotes a principals Kerberos V5 credentials to DCE credentials

Synopsis

k5dcelogin username cmd[cmd_parameter]

Arguments

username
The name of the remote user attempting to access the remote host.

cmd
The remote command to be invoked by k5dcelogin after the DCE credentials have been established. Typically, this is the login (1) command or a shell command.

Description

The k5dcelogin command promotes a principals Kerberos V5 login credentials to DCE credentials without prompting for a password. It is intended to be called by the kerberized rlogind and rshd servers as the last step of the authentication process when ticket forwarding is requested.

The DCE credentials are destroyed when the command finishes.

Only the remote owner should be granted write and execute permissions to k5dcelogin.

Related Information
Commands:

rlogind(8sec)

rshd(8sec)