kftgtd - Server for kftgt, a Kerberos v4 ticket forwarding utility

kftgtd

kftgtd is the server for kftgt. It accepts forwarded Kerberos v4 ticket-granting tickets and saves them for later use by a login session. Access checking is done the same as Kerberos v4 klogind(8).

See kftgt(1) for more information about kftgt and other warnings and caveats about this service.

kftgtd should be started from inetd and must be run as root or be installed setuid root as it needs to be able to read the system srvtab file and change its UID to create tickets. A typical inetd.conf entry looks like:

  kftgtd stream tcp nowait root /usr/sbin/tcpd /usr/local/sbin/kftgtd

You will also need the corresponding entry in /etc/services:

  kftgt         2109/tcp        kftgtd  # Kerberos TGT forwarding svc.

kftgtd times out in 60 seconds if the transaction is not completed.

kftgtd must be running on a machine that is registered for rlogin service; that is, the host must have a srvtab containing an rcmd.<host> key where <host> is the value returned by the krb_get_phost(3) Kerberos library call.

Roland J. Schemers <schemers@stanford.edu>.

kftgt and kftgtd continue to be maintained by the Kerberos team at Stanford University, although no major changes in the functionality of these programs are planned. Questions and bug reports may be sent to Russ Allbery <rra@stanford.edu>, but please be aware that we only support Stanford affiliates and may not be able to help with problems at other sites.

Copyright 1994, 1997, 2001 Board of Trustees, Leland Stanford Jr. University

All rights reserved.

Export of this software from the United States of America may require a specific license from the United States Government. It is the responsibility of any person or organization contemplating export to obtain such a license before exporting.

WITHIN THAT CONSTRAINT, permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation, and that the name of Stanford University not be used in advertising or publicity pertaining to distribution of the software without specific, written prior permission. Stanford University makes no representations about the suitability of this software for any purpose. It is provided as is without express or implied warranty.

THIS SOFTWARE IS PROVIDED AS IS AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

kftgt(1), inetd(8), kerberos(1)