4.4BSD/usr/share/man/cat1/rlogin.0

RLOGIN(1)                    BSD Reference Manual                    RLOGIN(1)

NNAAMMEE
     rrllooggiinn - remote login

SSYYNNOOPPSSIISS
     _r_l_o_g_i_n [--88EEKKLLddxx] [--ee _c_h_a_r] [--kk _r_e_a_l_m] [--ll _u_s_e_r_n_a_m_e] _h_o_s_t

DDEESSCCRRIIPPTTIIOONN
     RRllooggiinn starts a terminal session on a remote host _h_o_s_t.

     RRllooggiinn first attempts to use the Kerberos authorization mechanism, de-
     scribed below.  If the remote host does not supporting Kerberos the stan-
     dard Berkeley _r_h_o_s_t_s authorization mechanism is used.  The options are as
     follows:

     --88    The --88 option allows an eight-bit input data path at all times;
           otherwise parity bits are stripped except when the remote side's
           stop and start characters are other than ^S/^Q .

     --EE    The --EE option stops any character from being recognized as an es-
           cape character.  When used with the --88 option, this provides a com-
           pletely transparent connection.

     --KK    The --KK option turns off all Kerberos authentication.

     --LL    The --LL option allows the rlogin session to be run in ``litout''
           (see tty(4))  mode.

     --dd    The --dd option turns on socket debugging (see setsockopt(2))  on the
           TCP sockets used for communication with the remote host.

     --ee    The --ee option allows user specification of the escape character,
           which is ``~'' by default.  This specification may be as a literal
           character, or as an octal value in the form \nnn.

     --kk    The option requests rlogin to obtain tickets for the remote host in
           realm _r_e_a_l_m instead of the remote host's realm as determined by
           krb_realmofhost(3).

     --xx    The --xx option turns on DES encryption for all data passed via the
           rlogin session.  This may impact response time and CPU utilization,
           but provides increased security.

     A line of the form ``<escape char>.'' disconnects from the remote host.
     Similarly, the line ``<escape char>^Z'' will suspend the rrllooggiinn session,
     and ``<escape char><delayed-suspend char>'' suspends the send portion of
     the rlogin, but allows output from the remote system.  By default, the
     tilde (``~'') character is the escape character, and normally control-Y
     (``^Y'') is the delayed-suspend character.

     All echoing takes place at the remote site, so that (except for delays)
     the rrllooggiinn is transparent.  Flow control via ^S/^Q and flushing of input
     and output on interrupts are handled properly.

KKEERRBBEERROOSS AAUUTTHHEENNTTIICCAATTIIOONN
     Each user may have a private authorization list in the file _._k_l_o_g_i_n in
     their home directory.  Each line in this file should contain a Kerberos
     principal name of the form _p_r_i_n_c_i_p_a_l_._i_n_s_t_a_n_c_e_@_r_e_a_l_m. If the originating
     user is authenticated to one of the principals named in _._k_l_o_g_i_n, access
     is granted to the account.  The principal _a_c_c_o_u_n_t_n_a_m_e_._@_l_o_c_a_l_r_e_a_l_m is
     granted access if there is no _._k_l_o_g_i_n file.  Otherwise a login and pass-
     word will be prompted for on the remote machine as in login(1).  To avoid
     certain security problems, the _._k_l_o_g_i_n file must be owned by the remote
     user.

     If Kerberos authentication fails, a warning message is printed and the
     standard Berkeley rrllooggiinn is used instead.

EENNVVIIRROONNMMEENNTT
     The following environment variable is utilized by rrllooggiinn:

     TERM  Determines the user's terminal type.

SSEEEE AALLSSOO
     rsh(1),  kerberos(3),  krb_sendauth(3),  krb_realmofhost(3)

HHIISSTTOORRYY
     The rrllooggiinn command appeared in 4.2BSD.

BBUUGGSS
     RRllooggiinn will be replaced by telnet(1) in the near future.

     More of the environment should be propagated.

4.2 Berkeley Distribution        June 6, 1993                                2