LOGIN_TIS(8)

NAME
login_tis - provide TIS Firewall Toolkit authentication type

SYNOPSIS
login_tis [-s service] [-v fd=number] user [class]

DESCRIPTION
The login_tis utility is called by login(1), su(1), ftpd(8), and others to authenticate the user via the TIS “Firewall Toolkit” authentication server (authsrv), optionally using DES encryption.

The service argument specifies which protocol to use with the invoking program. The allowed protocols are login, challenge, and response. The default protocol is login.

The fd argument is used to specify the number of an open file descriptor connected to authsrv. This allows a persistent connection to be used for separate challenge and response authentication.

The user argument is the login name of the user to be authenticated.

The class argument is the login class of the user to be authenticated and is used to look up /etc/login.conf variables (see below). It is also sent to authsrv for logging purposes. If no class argument is specified, the class will be obtained from the password database.

login_tis will connect to authsrv and, depending on the desired protocol, will do one of three things:

login
    Present user with a challenge, accept a response and report back to the invoking program whether or not the authentication was successful.

challenge
    Return a challenge for user if the user's entry in authsrv specifies a challenge/response style of authentication.

response
    Send a response to authsrv and report back to the invoking program whether or not the server accepted it.

LOGIN.CONF VARIABLES
The login_tis utility uses the following TIS-specific /etc/login.conf variables:

tis-keyfile
    Path to a file containing a DES key string to be used for encrypting communications end to end with authsrv. This file must not be readable or writable by users other than root. If no tis-keyfile is specified, communication with authsrv will be sent in clear text.

tis-port
    Symbolic name listed in services(5) or port number on which authsrv listens. Defaults to port 7777.

tis-server
    Hostname or IP address of the TIS authsrv daemon to connect to. Defaults to “localhost”.

tis-server-alt
    Alternate server to use when the primary is not reachable.

tis-timeout
    Number of seconds to wait for a response from authsrv. Defaults to 15 seconds.

SEE ALSO
login(1), login.conf(5), services(5), ftpd(8), login_radius(8)