version 1.26, 2010/12/09 22:34:04 |
version 1.27, 2010/12/10 19:29:52 |
|
|
.Op Ar login Op Ar "shell arguments" |
.Op Ar login Op Ar "shell arguments" |
.Ek |
.Ek |
.Sh DESCRIPTION |
.Sh DESCRIPTION |
|
The |
.Nm |
.Nm |
requests the Kerberos password for |
utility allows a user to run a shell with the user and group ID of another user |
|
without having to log out and in as that other user. |
|
.Pp |
|
If Kerberos is in use, the password for |
.Ar login |
.Ar login |
(or for |
(or for |
.Dq Ar login Ns .root , |
.Dq Ar login Ns .root , |
if no login is provided), and switches to |
if no login is provided) is requested, and |
|
.Nm |
|
switches to |
that user and group ID after obtaining a Kerberos ticket granting access. |
that user and group ID after obtaining a Kerberos ticket granting access. |
A shell is then executed, and any additional |
A shell is then executed, and any additional |
.Ar "shell arguments" |
.Ar "shell arguments" |
after the login name |
after the login name |
are passed to the shell. |
are passed to the shell. |
|
If Kerberos is not configured or if there is a Kerberos error, |
.Nm |
.Nm |
will resort to the local password file to find the password for |
falls back to local password authentication to validate the password for |
.Ar login |
.Ar login . |
if there is a Kerberos error or if Kerberos is not installed. |
|
If |
If |
.Nm |
.Nm |
is executed by root, no password is requested and a shell |
is executed by root, no password is requested and a shell |
|
|
file. |
file. |
.It Fl K |
.It Fl K |
Do not attempt to use Kerberos to authenticate the user. |
Do not attempt to use Kerberos to authenticate the user. |
|
This is shorthand for |
|
.Dq Nm Fl a Ar passwd , |
|
provided for backwards compatibility. |
.It Fl L |
.It Fl L |
Loop until a correct username and password combination is entered, |
Loop until a correct username and password combination is entered, |
similar to |
similar to |
|
|
command appeared in |
command appeared in |
.At v7 . |
.At v7 . |
.Sh BUGS |
.Sh BUGS |
There is no direct way to force a particular shell to be used. |
|
.Pp |
|
The login name is not optional for root if there are shell arguments. |
The login name is not optional for root if there are shell arguments. |