diff options
| author | markm <markm@FreeBSD.org> | 1997-09-04 06:04:33 +0000 |
|---|---|---|
| committer | markm <markm@FreeBSD.org> | 1997-09-04 06:04:33 +0000 |
| commit | a8a89cfaf983bc64f4b42f7c35209a5a36dd0fe8 (patch) | |
| tree | 0b84977f19022a965f8c6145f067f951173f6290 /crypto/kerberosIV/etc/inetd.conf.changes | |
| download | FreeBSD-src-a8a89cfaf983bc64f4b42f7c35209a5a36dd0fe8.zip FreeBSD-src-a8a89cfaf983bc64f4b42f7c35209a5a36dd0fe8.tar.gz | |
Initial import of KTH eBones. This has been cleaned up to only include
the "core" Kerberos functionality. The rest of the userland will get their
own changes later.
Diffstat (limited to 'crypto/kerberosIV/etc/inetd.conf.changes')
| -rw-r--r-- | crypto/kerberosIV/etc/inetd.conf.changes | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/crypto/kerberosIV/etc/inetd.conf.changes b/crypto/kerberosIV/etc/inetd.conf.changes new file mode 100644 index 0000000..a9721a0 --- /dev/null +++ b/crypto/kerberosIV/etc/inetd.conf.changes @@ -0,0 +1,33 @@ +# +# $Id: inetd.conf.changes,v 1.12 1996/10/27 11:58:02 bg Exp $ +# +# Turn off vanilla rshd and rlogind with an informational message. +# If you really want this security problem remove the '-v' option! +shell stream tcp nowait root /usr/athena/libexec/rshd rshd -l -L -v +login stream tcp nowait root /usr/athena/libexec/rlogind rlogind -l -v +# +# Kerberos rsh +kshell stream tcp nowait root /usr/athena/libexec/rshd rshd -L -k +ekshell stream tcp nowait root /usr/athena/libexec/rshd rshd -L -k -x +ekshell2 stream tcp nowait root /usr/athena/libexec/rshd rshd -L -k -x +# +# Kerberos rlogin +klogin stream tcp nowait root /usr/athena/libexec/rlogind rlogind -k +eklogin stream tcp nowait root /usr/athena/libexec/rlogind rlogind -k -x +# +# Kerberized telnet and ftp, consider adding '-a user' to +# disallow cleartext passwords to both telnetd and ftpd. +telnet stream tcp nowait root /usr/athena/libexec/telnetd telnetd -a none +ftp stream tcp nowait root /usr/athena/libexec/ftpd ftpd -a none +# +# Kerberized POP. Server principal is pop.hostname, *not* rcmd.hostname! +#kpop stream tcp nowait root /usr/athena/libexec/popper popper -k +# +# Old POP3 with passwords in clear (not recommended, uses cleartext passwords) +#pop3 stream tcp nowait root /usr/athena/libexec/popper popper +# +# Kauthd, support for putting tickets on other machines in a secure fashion. +kauth stream tcp nowait root /usr/athena/libexec/kauthd kauthd +# +# Encrypted X connections +kx stream tcp nowait root /usr/athena/libexec/kxd kxd |
