The -k Option of Telnet Command

Ken Hoyt <hoyt@hpindyo.cup.hp.com> Fri, 17 November 1995 20:52 UTC

Message-Id: <199511172043.AA129241037@hpindyo.cup.hp.com>
To: telnet-ietf@cray.com
Cc: hoyt@hpindyo.cup.hp.com, marjo@hpindyo.cup.hp.com
Subject: The -k Option of Telnet Command
Date: Fri, 17 Nov 1995 12:43:57 -0800
Sender: ietf-archive-request@IETF.CNRI.Reston.VA.US
From: Ken Hoyt <hoyt@hpindyo.cup.hp.com>

We are attempting to support Kerberos 5 authentication on our Telnet and 
are being asked to support the "-k <realm>" option for the telnet command.
However, I noticed the following code segment in the BSD telnet command
code (from main.c):

	case 'k':
	#if defined(AUTHENTICATION) && defined(KRB4)
	    {
	    extern char *dest_realm, dst_realm_buf[], dst_realm_sz;
	    dest_realm = dst_realm_buf;
	    (void)strncpy(dest_realm, optarg, dst_realm_sz);
	    }
	#else
	    fprintf(stderr,
		   "%s: Warning: -k ignored, no Kerberos V4 support.\n",
		   prompt);
        #endif
        break;

In this code, it seems obvious to me that the -k option is not supported
outside of Kerberos 4 authentication.  Therefore, my questions are:

   1. Is it really true that the -k option is only supported within
      Kerberos 4 authentication and thus not intended for support
      within Kerberos 5 authentication?

   2. a. If the answer to #1 is yes, then is there another way in which
         this functionality is implemented?

      b. If the answer to #1 is no, please elaborate on what it would
	 take to support the -k option for Kerberos 5.

I apologize if this seems like a trivial or obvious matter, but I want
to make sure I am clear on this issue.

Thank you.

- Ken Hoyt (hoyt@cup.hp.com)
  Hewlett-Packard
  (408) 447-3042

The -k Option of Telnet Command Ken Hoyt
Re: The -k Option of Telnet Command Theodore Ts'o