This file is generated from /mit/telnet/www/home.html. THE TELNET LOCKER CONTENTS: Kerberos-authenticated telnet client and server, binaries and source for Unix. NCSA telnet for Mac is not in this locker, but is available at MIT via anonymous FTP from net-dist.mit.edu. DESCRIPTION: This locker contains versions of telnet and telnetd that take advantage of Kerberos authentication and DES encryption. They interoperate with other versions of telnet and telnetd, but when the new telnet connects to the new telnetd, you get automatic passing of some environment variables, including DISPLAY (properly translated from :0.0 to hostname:0.0 if necessary). Window size changes are handled appropriately. HOW TO RUN: + For authentication and encryption, add telnet; ktelnet -ax host + For the same functionality but better mnemonics, Athena has added the equivalent, add telnet; ktelnet -safe host + To run the telnet server on your Unix workstation at MIT, 1. Send mail to net-help@mit.edu giving the name of your machine and asking for a rcmd srvtab. 2. If your workstation is running Athena release 7.7 or higher (type /bin/athena/machtype -A to find out), run mkserv remote as root and skip the following two steps. 3. If /etc/athena/telnetd does not exist on your workstation, copy it from the telnet locker. 4. If /etc/athena/krb.conf and /etc/athena/krb.realms don't exist on your workstation, copy them from any Athena workstation or dialup server. 5. Find the line in /etc/athena/inetd.conf or /etc/inetd.conf that starts with ``telnet'' and change the last two columns to ``/etc/athena/telnetd telnetd'' for login without a password, or to ``/etc/athena/telnetd telnetd -a off'' for behavior like the Athena dialup servers, i.e. ask for password in addition to Kerberos authentication. 6. Follow net-help's instructions for installing your srvtab. INTERFACES: TTY only VERSIONS: + for Alpha/OSF/1: telnet '94 with Athena extensions + for DECstation/Ultrix: telnet '94 with Athena extensions + for linux: telnet '94 with Athena extensions + for RS6000/AIX: telnet '94 with Athena extensions + for HP9000/HP-UX: telnet '94 + for Vax/BSD: telnet '92 DEPENDENCIES: Kerberos authentication and encryption will not work without the files /etc/athena/krb.conf and /etc/athena/krb.realms. You will also need Kerberos utilities: kinit, klist, kdestroy DATAFILES: telnet does not use datafiles LICENSE SERVER: no _________________________________________________________________ SUPPORT ISSUES -- I/S SUPPORT: CONSULTING: supported TRAINING: no minicourse is devoted to telnet DOCUMENTATION: + telnet man page + telnetd man page + "Two Telnet Scenarios" documents the rationale behind telnetd's behavior on Athena dialup servers. + "Coming to closure on athena.dialup.mit.edu" talks about load-balancing issues. + The zmodem/kermit issue + Tech articles: o Loopholes Loom Large in MITnet (April 22, 1994) o Jeff Schiller and Joanne Costello's response letter (April 29, 1994) o How to Be Secure on MITnet (April 22, 1994) o IS Works to Address Security of MITnet (September 27, 1994) o Intruders Breach Network Security; Passwords Stolen (January 11, 1995) BUG REPORTS: send email to bugs@mit.edu _________________________________________________________________ LEGAL ISSUES -- SITES: NOTE --- the version of telnet located in this directory contains functions which allow a data stream to be encrypted. EXPORT OF THIS SOFTWARE FROM THE UNITED STATES OF AMERICA MAY REQUIRE A SPECIFIC LICENSE FROM THE UNITED STATES GOVERNMENT. IT IS THE RESPONSIBILITY OF ANY PERSON OR ORGANIZATION CONTEMPLATING EXPORT TO OBTAIN SUCH A LICENSE BEFORE EXPORTING. Qualified sites may acquire telnet '94 sources from net-dist.mit.edu:pub/telnet Other sites may obtain telnet '94 without encryption from ftp.cray.com(128.162.15.3):src/telnet DOCUMENTATION: You may freely copy the accompanying program documentation. __________________________________________________________ ABOUT THIS LOCKER -- MAINTAINER(S): Bruce R. Lewis DIRECTORY STRUCTURE: OLD - telnet '92 Private - semi-private mail re. the telnet project RCS - revision control decmipsbin - DECstation Ultrix 4 binaries hpbin - HP9000/700 HP-UX 9 binaries rsaixbin - RS/6000 AIX 3 binaries sun4bin - Sparc Solaris 2 binaries man - manual pages www - html documents doc - other documentation src - source code MODIFY HISTORY: $Log: home.html,v $ Revision 1.7 1995/04/26 15:06:22 brlewis To: brlewis@MIT.EDU Cc: netreq@MIT.EDU Subject: telnet locker readme Date: Tue, 25 Apr 1995 18:49:08 EDT From: Matt Braun please correct the telnet locker README.athena (and the associated html ) to tell people to send mail to net-help@mit.edu not netreq. Matt Revision 1.6 1995/02/16 22:17:35 brlewis mention alpha and linux versions Revision 1.5 1995/01/17 17:41:37 brlewis added another Tech article Revision 1.4 94/11/14 12:37:28 brlewis jweiss' fixes to telnetd installation instructions Revision 1.3 94/10/31 17:46:10 brlewis added more instructions, document pointers to home page 94/10/05 made telnet client complain if server doesn't authenticate Revision 1.2 94/08/31 11:41:32 brlewis added hack for athena.dialup.mit.edu to work in telnetd Revision 1.1 94/07/19 16:41:57 brlewis Initial revision MISCELLANEOUS: Comments about Athena-local modifications should be sent to . Discussion about Kerberos can be found in the newsgroup comp.protocols.kerberos (read the FAQ before posting).