Do you have SUDO available on the linux box?

If so then you could setup your rexec userid with a NOPASSWD sudo entry :

Cmnd_Alias    MYCOMMAND = /path/to/what/you/want/to/do
rexecusrid           ALL=NOPASSWD:MYCOMMAND

Then in your rexec use:
rexec linuxbox 'sudo /path/to/what/you/want/to/do'

I've never played with the sudo host_alias stuff but that might help make
it a bit more secure.. but you already know that it's not..  But at least
with this solution your not sending the root password over the wire in
clear text anywhere.

My $.02.

jrw







Jim Chappell <[EMAIL PROTECTED]>
Sent by: Linux on 390 Port <[email protected]>
03/13/2007 02:42 PM
Please respond to
Linux on 390 Port <[email protected]>


To
[email protected]
cc

Subject
[LINUX-390] REXEC - ROOT HOW-TO






I need to run an REXEC from a z/OS platform to a zLinux SLES 9 SP3
environment and I NEED for the REXEC to have ROOT authority.

Yes I know all about the security problems that this entails but at this
point I do not have much choose.

My attempts all fail:

EZA4801I  MVS TCP/IP REXEC CS V1R6
EZA4810E  The call to rexec_af() function failed:
EZA4744I  Foreign host aborted the connection.

I can do some of my process if I use a userid other than ROOT so the
network environment is OK (I think anyway)

a)  Can I use ROOT (I know that I shouldn't but I have a need for speed)
b)  If so where is the control being implemented?


Jim Chappell
503 745-7841
503 349-5603(Cell)
[EMAIL PROTECTED]

"Not everything that can be counted counts, and not everything that
counts can be counted." - Albert Einstein

"If your don't change your direction, you'll end up where you're going"


----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to