LOGIN_KERBEROS(8)       OpenBSD System Manager's Manual      LOGIN_KERBEROS(8)

NAME
     login_kerberos - provide kerberos authentication type

SYNOPSIS
     login_kerberos [-s service] [-v lastchance=yes|no] user [class]

DESCRIPTION
     The login_kerberos utility implements the kerberos authentication mecha-
     nism.  It is called by login(1), su(1), ftpd(8), and others to authenti-
     cate the user with kerberos.

     The user argument is the user's name to be authenticated.

     The service argument specifies which protocol to use with the invoking
     program.  The allowed protocols are login, challenge, and response. (The
     challenge protocol is silently ignored but will report success as ker-
     beros authentication is not challenge-response based).

     If the lastchance argument is specified and is equal to ``yes'', then if
     the user's password has expired, and it has not been expired longer than
     ``password-dead'' seconds (see login.conf(5)), the user will be able to
     log in one last time to change the password.

     login_kerberos will prompt the user for a password and report back to the
     invoking program whether or not the authentication was successful.

SEE ALSO
     login(1), passwd(1), su(1), login.conf(5), ftpd(8)

OpenBSD 2.9                    December 11, 2000                             1
