topic Re: Modifying the rhost file in Operating System - HP-UX

Modifying the rhost file

Amrit_1 — Thu, 22 Jan 2004 07:00:36 GMT

Hi,

I needed to ftp a file from my local machine to a remote machine. Hence, I need to modify the .rhosts file on the remote machine. While doing this operation, I am adding the following entries:

a. hostIP address userid
b. + root

I am skeptically about adding the second entry since it would give access to everyone and this would result in a major security breach.
In short, is it sufficient to add only the first entry.

Also, what is the difference between
+ + and + root entry in the .rhosts file.

Re: Modifying the rhost file

Mark Grant — Thu, 22 Jan 2004 07:05:54 GMT

You don't need a .rhosts entry to ftp a file.

You need to look at /etc/ftpd/ftpusers or ftpaccess or /var/adm/inetd.sec if you are not being allowed to ftp.

Re: Modifying the rhost file

Sunil Sharma_1 — Thu, 22 Jan 2004 07:10:56 GMT

Hi,

You need not to modify .rhost file for enabling ftp access. .rhost file is not playing any role in ftp.
you may require to modify /etc/ftpuser to control ftp access or inetd.sec file.

Sunil

Re: Modifying the rhost file

Michael Schulte zur Sur — Thu, 22 Jan 2004 07:12:47 GMT

Hi,

that's correct. You need .rhosts for rsh, rcp, rlogin and the like but not for ftp.

Michael

Re: Modifying the rhost file

G. Vrijhoeven — Thu, 22 Jan 2004 07:12:56 GMT

Hi,

Armit for ftp you need a .netrc file. But this is a big secutiry risc, couse if contains a servername, username and passwd. I would suggest you use SCP. I am sure SEP will post you a howto.

Gideon

Re: Modifying the rhost file

T G Manikandan — Thu, 22 Jan 2004 08:15:57 GMT

+ + would mean -->any user from any host can login

+ root -->user root from any host can login.

as stated do not use .rhosts file for ftp.

Re: Modifying the rhost file

Amrit_1 — Fri, 23 Jan 2004 07:03:40 GMT

Apart from ftp, I am also executing the rexec and remsh command and hence need to add a entry in the rhost file. Under this scenario, is there any need to have the "+ root" entry in the .rhosts file or would it be sufficient to have userid.

Also, while ftping is it compulsory to have the entry in the /etc/ftpuser file.

One last thing, I was checking my HP-UX 11i and there is not ftpuser file present in the /etc/ftpd nor is there a /var/adm/inetd.sec file.

Re: Modifying the rhost file

Mark Grant — Fri, 23 Jan 2004 07:10:18 GMT

hostname and user name is just fine for the "r" commands

if ftpusers exists then only the users mentioned in it can ftp. Otherwise all users can.

/var/adm/inetd.sec should exists but if it doesn't then it just means that anybody can use ftp too.

One common problem is that the user's shell must appear in /etc/shells for ftp to work.

Re: Modifying the rhost file

Sunil Sharma_1 — Fri, 23 Jan 2004 08:36:52 GMT

Hi,

Fist column in .rhosts/hosts.equiv file is for hostname/IP address and second is user name.

if you give + in both column meance every user from every hosts and it can be a security concern so always use

Hostname Username

/etc/ftpuser file is for blocking perticular user to gain ftp access. it is optional file and you can create it using vi.
in this file you have to mention username only one per line.
/var/adm/inetd.sec should be there by default.

Sunil