| < kadmin-remctl | Russ Allbery > Software | krb5-strength > |
"Taak fir and beer it in the derkeste hous
Bitwixe this and the Mount of Caucasus,
And lat men shette the dores and go thenne,
Yit wol the fir as faire lie and brenne
As twenty thousand men mighte it biholde."Geoffrey Chaucer, "The Wife of Bath's Tale," Canterbury Tales
kftgt is a client and server for forwarding and accepting forwarded Kerberos v4 tickets, since Kerberos v4 (unlike Kerberos v5) does not have a built-in ticket forwarding mechanism. It is used at Stanford to support remote logins with AFS, since one may need to have a ticket and AFS token on the remote system in order to read one's home directory.
This package is essentially frozen. There will probably be only one more cleanup release. Stanford is moving to a pure Kerberos v5 environment, which supports ticket forwarding in a much more robust and secure fashion. This package is maintained solely for compatibility with our existing environment until we complete that transition. If you can avoid using this hack, you should.
kftgt was originally written by Roland Schemers, with improvements by Booker Bense. I have since rewritten the krsh and klogin wrappers, but have only made portability fixes and minor improvements to the kftgt code.
kftgt is written in C and requires a C compiler to build. It also requires Kerberos v4 libraries to link against. It has been tested only with the MIT Kerberos v4 compatibility libraries from the Kerberos v5 distribution, but likely will also build against the KTH Kerberos v4 libraries.
The krsh and klogin wrappers require Perl 5.004 or later. krsh also expects to find aklog, kdestroy, and unlog on the user's path, the first to obtain AFS tokens from a Kerberos v4 ticket. You may need to change krsh if your aklog is spelled afslog, kafslog, or some other varient.
Ticket forwarding will likely only work if your Kerberos v4 KDC is the AFS kaserver (rather than, say, a Cygnus K4 KDC).
Copyright 1994, 1996, 1997, 1999, 2001, 2002, 2003, 2005, 2006, 2007 Board of Trustees, Leland Stanford Jr. University. All rights reserved.
Export of this software from the United States of America may require a specific license from the United States Government. It is the responsibility of any person or organization contemplating export to obtain such a license before exporting.
WITHIN THAT CONSTRAINT, permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation, and that the name of Stanford University not be used in advertising or publicity pertaining to distribution of the software without specific, written prior permission. Stanford University makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
The distribution:
| kftgt 1.14 | 2007-06-06 | Download | PGP signature |
Documentation:
Debian packages are available from Debian in unstable, testing, and the sarge release. Install kftgt for the clients and kftgtd for the server. Thanks to Ben Pfaff for doing the initial Debian packaging.
| < kadmin-remctl | Russ Allbery > Software | krb5-strength > |