758f3a64bd
1) Don't spit out an error message if Kerberos is installed but not yet set up. 2) Don't attempt to verify the ticket you got back, as workstations are not intended to have srvtab files of their own. Both behaviors can be re-enabled with KLOGIN_PARANOID. |
||
---|---|---|
.. | ||
klogin.c | ||
login_access.c | ||
login_fbtab.c | ||
login_skey.c | ||
login.1 | ||
login.access.5 | ||
login.c | ||
Makefile | ||
pathnames.h | ||
README |
This login has additional functionalities. They are all based on (part of) Wietse Venema's logdaemon package. The following defines can be used: 1) LOGIN_ACCESS to allow access control on a per tty/user combination 2) SKEY to allow the use of s/key one time passwords 3) LOGALL to log all logins -Guido This login has some of Berkeley's paranoid/broken (depending on your point of view) Kerberos code conditionalized out, so that by default it works like klogin does at MIT-LCS. You can define KLOGIN_PARANOID to re-enable this code. This define also controls whether a warning message is printed when logging into a system with no krb.conf file, which usually means that Kerberos is not configured. -GAWollman