| < Tasker | Russ Allbery > Software > Obsolete Software | runauth > |
"Taak fir and beer it in the derkeste hous
Bitwixe this and the Mount of Caucasus,
And lat men shette the dores and go thenne,
Yit wol the fir as faire lie and brenne
As twenty thousand men mighte it biholde."Geoffrey Chaucer, "The Wife of Bath's Tale," Canterbury Tales
This package is obsolete. It is only useful or necessary with Kerberos v4, which is thoroughly obsolete, has a broken security model, and should no longer be used. It is here for historical interest, but no further releases will be made.
kftgt is a client and server for forwarding and accepting forwarded Kerberos v4 tickets, since Kerberos v4 (unlike Kerberos v5) does not have a built-in ticket forwarding mechanism. It was used at Stanford to support remote logins with AFS, since one may need to have a ticket and AFS token on the remote system in order to read one's home directory.
Stanford moved to a pure Kerberos v5 environment in 2008, which supports ticket forwarding in a much more robust and secure fashion. You should neither use Kerberos v4 nor this hack if you can avoid it.
kftgt was originally written by Roland Schemers, with improvements by Booker Bense. I later rewrote the krsh and klogin wrappers and made some portability fixes and minor improvements to the kftgt code.
kftgt is written in C and requires a C compiler to build. It also requires Kerberos v4 libraries to link against. It has been tested only with the MIT Kerberos v4 compatibility libraries that used to be included in the Kerberos v5 distribution, but likely will also build against the KTH Kerberos v4 libraries (if you can still find them).
The krsh and klogin wrappers require Perl 5.004 or later. krsh also expects to find aklog, kdestroy, and unlog on the user's path, the first to obtain AFS tokens from a Kerberos v4 ticket. You may need to change krsh if your aklog is spelled afslog, kafslog, or some other varient.
Ticket forwarding will likely only work if your Kerberos v4 KDC is the AFS kaserver (rather than, say, a Cygnus K4 KDC).
The distribution:
| kftgt 1.14 | 2007-06-06 | Download | PGP signature |
An archive of older releases is also available.
Debian packages were available from Debian as part of the Debian 4.0 (etch) and 3.1 (sarge) releases (install kftgt for the clients and kftgtd for the server), but have been removed from Debian 5.0 (lenny) and later due to their very limited audience.
Thanks to Ben Pfaff for doing the initial Debian packaging.
kftgt is maintained using the Git version control system. To check out the current development tree, clone:
git://git.eyrie.org/kerberos/kftgt.git
You can also browse the current development source.
Copyright 1994, 1996, 1997, 1999, 2001, 2002, 2003, 2005, 2006, 2007 The Board of Trustees of the Leland Stanford Junior University. All rights reserved.
Export of this software from the United States of America may require a specific license from the United States Government. It is the responsibility of any person or organization contemplating export to obtain such a license before exporting.
WITHIN THAT CONSTRAINT, permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation, and that the name of Stanford University not be used in advertising or publicity pertaining to distribution of the software without specific, written prior permission. Stanford University makes no representations about the suitability of this software for any purpose. It is provided "as is" without express or implied warranty.
THIS SOFTWARE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
| < Tasker | Russ Allbery > Software > Obsolete Software | runauth > |