.\" Copyright (c) 1983, 1990 The Regents of the University of California.
.\" %sccs.include.redist.man%
.\" @(#)rlogin.1 6.15 (Berkeley) %G%
rlogin [ \-8KLdx ] [ \-e char ] [ \-k realm ] [ \-l username ] host
starts a terminal session on a remote host
first attempts to use the Kerberos authorization mechanism, described below.
If the remote host does not supporting Kerberos the standard Berkeley
authorization mechanism is used.
The options are as follows:
The \-8 option allows an eight-bit input data path at all times; otherwise
parity bits are stripped except when the remote side's stop and start
characters are other than ^S/^Q.
Eight-bit mode is the default.
The \-K option turns off all Kerberos authentication.
The \-L option allows the rlogin session to be run in ``litout'' (see
The \-d option turns on socket debugging (see
on the TCP sockets used for communication with the remote host.
By default, the tilde (``~'') character is the escape character.
The \-e option allows specification of a different escape character.
The \-k option requests rlogin to obtain tickets for the remote host
instead of the remote host's realm as determined by
The \-x option turns on DES encryption for all data passed via the
This may impact response time and CPU utilization, but provides
A line of the form ``~.'' disconnects from the remote host, where ``~''
Similarly, the line ``~^Z'' will suspend the
Substitution of the delayed-suspend character (normally ^Y) for the
suspend character suspends the send portion of the rlogin, but allows
output from the remote system.
All echoing takes place at the remote site, so that (except for delays)
Flow control via ^S/^Q and flushing of input and output on interrupts
.SH KERBEROS AUTHENTICATION
Each user may have a private authorization list in the file ``.klogin''
Each line in this file should contain a Kerberos principal name of the
.IR principal.instance@realm .
If the originating user is authenticated to one of the principals named
in ``.klogin'', access is granted to the account.
The principal \fIaccountname\fP.@\fIlocalrealm\fP is granted access if
there is no ``.klogin'' file.
Otherwise a login and password will be prompted for on the remote machine
To avoid certain security problems, the ``.klogin'' file must be owned by
If Kerberos authentication fails, a warning message is printed and the
rsh(1), kerberos(3), krb_sendauth(3), krb_realmofhost(3)
More of the environment should be propagated.