diff options
| -rw-r--r-- | libexec/telnetd/telnetd.8 | 27 |
1 files changed, 10 insertions, 17 deletions
diff --git a/libexec/telnetd/telnetd.8 b/libexec/telnetd/telnetd.8 index 1e14425ee1c..06476491e23 100644 --- a/libexec/telnetd/telnetd.8 +++ b/libexec/telnetd/telnetd.8 @@ -88,7 +88,7 @@ command accepts the following options: .Bl -tag -width "-a authmode" .It Fl a Ar authmode This option may be used for specifying what mode should -be used for authentication. +be used for Kerberos authentication. Note that this option is only useful if .Nm telnetd has been compiled with support for the @@ -101,13 +101,13 @@ There are several valid values for Turns on authentication debugging code. .It user Only allow connections when the remote user -can provide valid authentication information +can provide valid Kerberos authentication information to identify the remote user, and is allowed access to the specified account without providing a password. .It valid Only allow connections when the remote user -can provide valid authentication information +can provide valid Kerberos authentication information to identify the remote user. The .Xr login 1 @@ -122,7 +122,7 @@ and is thus the same as specifying .Fl a .Cm valid . .It otp -Only allow authenticated connections (as with +Only allow Kerberos authenticated connections (as with .Fl a .Cm user ) and also logins with one-time passwords (OTPs). This option will call @@ -130,17 +130,11 @@ login with an option so that only OTPs are accepted. The user can of course still type secret information at the prompt. .It none This is the default state. -Authentication information is not required. +Kerberos authentication information is not required. If no or insufficient authentication information -is provided, then the -.Xr login 1 -program will provide the necessary user -verification. +is provided, then traditional cleartext passwords will be used. .It off -This disables the authentication code. -All user verification will happen through the -.Xr login 1 -program. +This disables the authentication code, and cleartext password will be used. .El .It Fl B Ignored. @@ -175,7 +169,6 @@ Has not been implemented yet. .It Fl h Disables the printing of host-specific information before login has been completed. -.It Fl k .It Fl l Ignored. .It Fl n @@ -361,7 +354,7 @@ session is shut down. .It "WILL ENCRYPT" Only sent if .Nm telnetd -is compiled with support for data encryption, and +Kerberos is enabled, and indicates a willingness to decrypt the data stream. .El @@ -434,13 +427,13 @@ option can be used to disable this. .It "DO AUTHENTICATION" Only sent if .Nm telnetd -is compiled with support for authentication, and +Kerberos authentication is enabled, and indicates a willingness to receive authentication information for automatic login. .It "DO ENCRYPT" Only sent if .Nm telnetd -is compiled with support for data encryption, and +Kerberos is enabled, and indicates a willingness to decrypt the data stream. .El |