topic Re: Remote access in a Trusted HP-UX system in Operating System - HP-UX

Remote access in a Trusted HP-UX system

Enrico Venturi — Wed, 12 Nov 2003 10:27:15 GMT

Hello again,
are there any restrictions on the remote access between machines in a trusted environment?
I mean: is it still possible to use the .rhosts file to "open" the machines each other?
Arethere any doc. to summarize the main "restrictions"?

thanks again
Enrico

Re: Remote access in a Trusted HP-UX system

Jeff Schussele — Wed, 12 Nov 2003 10:30:21 GMT

Hi Enrico,

No, there are no restrictions on remote access introduced by the conversion to Trusted. Same rules still apply.

Rgds,
Jeff

Re: Remote access in a Trusted HP-UX system

Pete Randall — Wed, 12 Nov 2003 10:30:58 GMT

Enrico,

The trusted environment only affects the handling of the password file. There should be no impact or "r" utilities.

Pete

Re: Remote access in a Trusted HP-UX system

Marco Santerre — Wed, 12 Nov 2003 10:37:41 GMT

No, trusted mode doesn't stop you from using r-commands. So yes you can still define a .rhosts and use it in your Trusted environment. Actually you can even come from a non-trusted mode environement as well.

Re: Remote access in a Trusted HP-UX system

Steven E. Protter — Wed, 12 Nov 2003 10:41:43 GMT

Trusted system makes the users passwords more secure by shadowing them. They are moved from /etc/passwd to the /tcb folder into multiple files.

It does not in any way effect your ability to run insecure Berkley r- protocols.

Doing so after trusted system is a contradiction, but if you want to use Ignite, for example, thats what you have to do.

SEP

Re: Remote access in a Trusted HP-UX system

Lee Huei — Mon, 17 Nov 2003 05:14:12 GMT

refer to the link below:
http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/67-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/67-toc.html&searchterms=trusted%7cremote&queryid=20031117-031115

Chapter 8: Administering a System: Managing System Security

Trusted System Security

the remote access that can still be used in trusted environment:
remshd Remote shell server daemon; see remshd(1M)
rlogind Remote login server daemon; see rlogind(1M)