Justin Georgeson writes:
> I may just be a goober, but I can't seem to get the whole rhosts thing working.
> I've read the docs on PAM, and the rsh module looks like it supports rhosts.
> Could someone tell me the format for /etc/hosts.equiv and ~/.rhosts.

By any chance is your umask 02 rather than 022?  If so be sure you
chmod g-w,o-w the file.

For more info, I'll attach a copy of the BSD manpage below.

-- 
Chip Rosenthal * Unicom Systems Development  http://www.unicom.com/
Has your mail server been spamproofed?       http://maps.vix.com/tsi/
Outlaw junk email * Support CAUCE            http://www.cauce.org/
"Sure it's working, but couldn't you shine it up some?"

--- snip snip ----------------------------------------------------------------

HOSTS.EQUIV(5)          BSD Programmer's Manual         HOSTS.EQUIV(5)

NAME
     hosts.equiv, .rhosts - files listing trusted remote hosts and users

DESCRIPTION
     The hosts.equiv and .rhosts files list authorized hosts and users for the
     rsh(1),  rcp(1),  and rlogin(1) commands and the rcmd(3) library routine.
     All of these use the ruserok(3) library routine to perform ``authentica-
     tion.''  The files specify remote hosts and users that are trusted (i.e.,
     which may bypass the standard password authentication mechanism).  Care
     should be taken when setting up these files to maintain system security!

     The hosts.equiv file is searched first, followed by the .rhosts file in
     desired user's home directory.  The format for entries is:
           hostname [username]

     In the hosts.equiv file, an entry of the form:
           hostname
     indicates that users from the specified host may access the local host
     with the same login name used on the remote host.  Entries of the form:
           hostname username
     in the hosts.equiv file indicate that the specified user on the specified
     remote host may access the local host as any user.

     In .rhosts files, entries of the form:
           hostname
     indicate that the user on the specified host with the username corre-
     sponding to the local user can access the local host.  Entries of the
     form:
           hostname username
     indicate that the specified user on the remote host can access the local
     host as this user (with a different user name).

     The ruserok(3) routine requires the authentication files be writable only
     by the user being authenticated or root.  If the files are writable by
     other users or groups, authentication will fail.

     The hosts.equiv file is not used to authenticate root access; only the
     .rhosts file in root's home directory is used for root.  Login access for
     root also requires that the incoming tty be ``secure'' (see ttys(5)).

FILES
     /etc/hosts.equiv  The hosts.equiv file resides in /etc.
     $HOME/.rhosts     User specific access file.

SEE ALSO
     ruserok(3),  rcmd(3),  rcp(1),  rsh(1),  rlogin(1)

                                January 3, 1994                         1

--- snip snip ----------------------------------------------------------------
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]

Reply via email to