NAME

k5dcelogin - Promotes a principal’s Kerberos V5 credentials to DCE credentials

SYNOPSIS

k5dcelogin username cmd [cmd_parameter]

ARGUMENTS

usernameThe name of the remote user attempting to access the remote host. 

cmdThe remote command to be invoked by k5dcelogin after the DCE credentials have been established.  Typically this is the login(1) command or a shell command. 

DESCRIPTION

The k5dcelogin command promotes a principal’s Kerberos V5 credentials to DCE credentials without prompting for a password.  It is intended to be called by the kerberized rlogind and rshd servers as the last step of the authentication process when ticket forwarding is requested. 

The DCE credentials are destroyed when the command finishes. 

Only the remote owner should be granted write and execute permissions to k5dcelogin. 
 

RELATED INFORMATION

rlogind(8sec), rshd(8sec).