Re: Configure ssh to behave like rsh. How?

2004-06-26 Thread Geert Hendrickx
On Fri, Jun 25, 2004 at 03:45:24PM +0900, Rob wrote:
 
 Hi,
 
 I have a cluster of PCs, on which the 'slaves' used to only allow rsh
 connections, to execute commands, but no logins.
 
 I have removed the r-commands, and want to use the ssh command family
 instead. Although 'ssh slaveN command' works fine, this also allows login
 to the slave PC, simply by typing 'ssh slaveN'.
 
 How can I configure sshd, so that it will allow remote command execution,
 but will refuse logins?
 
 Thanks,
 Rob.

I'd say you could give the users no shell (if they shouldn't have shell
access to the machine in any other way), by setting their default shell
to /sbin/nologin.  You can do that with the chsh(1) command.  

Then again, they may still be able to start a shell with 
'ssh remote-machine tcsh'
so maybe you should chmod /bin/sh and /bin/tcsh to 550.  

GH
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Configure ssh to behave like rsh. How?

2004-06-25 Thread Rob
Hi,
I have a cluster of PCs, on which the 'slaves' used to only allow rsh
connections, to execute commands, but no logins.
I have removed the r-commands, and want to use the ssh command family
instead. Although 'ssh slaveN command' works fine, this also allows login
to the slave PC, simply by typing 'ssh slaveN'.
How can I configure sshd, so that it will allow remote command execution,
but will refuse logins?
Thanks,
Rob.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Configure ssh to behave like rsh. How?

2004-06-25 Thread Jorn Argelo
Rob wrote:
Hi,
I have a cluster of PCs, on which the 'slaves' used to only allow rsh
connections, to execute commands, but no logins.
I have removed the r-commands, and want to use the ssh command family
instead. Although 'ssh slaveN command' works fine, this also allows login
to the slave PC, simply by typing 'ssh slaveN'.
How can I configure sshd, so that it will allow remote command execution,
but will refuse logins?
Thanks,
Rob.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

I guess the folks at OpenSSH know it better then we do. Why don't you 
ask it on their mailing list?

Cheers,
Jorn
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Configure ssh to behave like rsh. How?

2004-06-25 Thread Hemal Pandya
I was interested in this for a slightly different reason --- I would
like to allow some users to ssh into my machine so they can port
forward but not allow them to actually login to the machine.
I found 
http://groups.google.com/groups?selm=200206210808.g5L88SJ15420_splat.grant.org%40ns.sol.net
to work.

On Fri, 25 Jun 2004 15:45:24 +0900, Rob [EMAIL PROTECTED] wrote:
 
 
 Hi,
 
 I have a cluster of PCs, on which the 'slaves' used to only allow rsh
 connections, to execute commands, but no logins.
 
 I have removed the r-commands, and want to use the ssh command family
 instead. Although 'ssh slaveN command' works fine, this also allows login
 to the slave PC, simply by typing 'ssh slaveN'.
 
 How can I configure sshd, so that it will allow remote command execution,
 but will refuse logins?
 
 Thanks,
 Rob.
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]