Re: rhosts authen problem with openSSH

[clemensF]

> Lutz Jaenicke:

> The concept is that only a privileged process (suid root) could allocate a
> privileged port. Thus the server could expect that the data sent could be
> trusted.
> This is necessary, as access permission is granted on host name and
> user name. The user name is sent by the client and the server has to
> decide whether this information can be trusted. Therefore the requirement
> for the privileged port.

you're right.

clemens