WHATPORT(543) whatport.net WHATPORT(543)
543

klogin (Kerberized rlogin)

Kerberized rlogin — the r-services with Kerberos tickets instead of .rhosts trust.

TCP IANA registry

Description

TCP 543 is registered as "klogin": rlogin authenticated with Kerberos, so the client presents a ticket rather than relying on host-based .rhosts files, and the session can optionally be encrypted. It was part of the Kerberos-patched application suite that shipped with MIT krb5 and with commercial Unix. MIT split those applications out of the core krb5 distribution in release 1.8 to be maintained separately, and SSH with GSSAPI has taken over the job, so a listener on 543 today means a very old Kerberos realm or an appliance that never updated.

Exposed to the internet?

Do not expose

An unmaintained interactive login service; even when the Kerberos authentication holds, the deployment around it is a decade or more past support. Use SSH.

Check it yourself

$ nc -vz -w 3 TARGET 543

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.