Edward Murrell <edw...@murrell.co.nz> writes:

> You probably do not have reverse DNS set up properly, or the reverse DNS
> name does not match the keytab installed on the application server.

Also, you can't just run rlogind from the command line.  It's a network
server that expects to be run out of inetd with a network socket on
standard input.

> In any case, you should ditch telnet and rlogin in favour of SSH.

Definitely true for telnet.  Kerberos rlogin still has some nice
advantages over ssh for simplicity and limitation of scope if you only
want to accept Kerberos authentication.

-- 
Russ Allbery (r...@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to