[Ilugc] Re: Help installing RSH

[Antony Paul]

Can anyone tell me whether a password based authentication is possible
with rsh ?. Is it possible to allow my machine only to connect to the
server. I need to use CVS as win boxes dont have ssh.

rgds
Antony Paul


On Fri, 18 Feb 2005 16:51:24 +0530, Antony Paul <antonypaul24 at gmail.com> wrote:
> Hi all,
>    I know that RSH is insecure.
> 
>    First of all do RSH asks for a password when executing a command ?.
> If no everything is OK. I configured RSH in a RHL 7.0 and I am able to
> login as any user from any machine. I want that only user antony from
> my machine should be accepted.
>      I did the following. My username is antony in both machines. The
> rsh-server package is installed.
> 
> chkconfig rsh on
> 
> Edited /etc/pam.d/rsh and changed the line
> 
> auth       required     /lib/security/pam_rhosts_auth.so
> to
> auth       sufficient   /lib/security/pam_rhosts_auth.so
> 
> Created /home/antony/.rhosts to add this line
> 
> 192.168.4.10 antony
> 
> Now any one from any machine can execute commands using rsh. This is insecure.
> 
> rgds
> Atnony Paul
>