About rlogin

[eric_204]

How to disable all users to rlogin to our UX box , but allow a specific user to rlogin only ? thx

[Michael Steele_2]

In /etc/hosts.equiv or $HOME/.rhosts

host1 user

[Steven E. Protter]

If the user has a fixed ip address it can be further regulated by /var/adm/inetd.sec

This file lets you regulate what ip addresses can use certain services.

Note that rlogin involves unencrypted passwords and can be replaced by HP Secure Shell. The setup on that requires public keys to be exchanged for password free entry, which provides you better security.

Get rid of the .rhosts files for all users you don't want to use rlogin.

SEP

[T G Manikandan]

you can do this based on the ip-address.

you can allow,deny access to machines in the /var/adm/inetd.sec


check the man pages of inetd.sec


Thanks

[eric_204]

the reply , my situation is that I am not sure what IP address that the user will use in their desktop because they are call from outside.
On the other hand, can I disable the rlogin function in my system and then only allow a specific users to use rlogin ?

Another question , instead of rlogin , I want to use telnet , does telnet can permit a remote user ( from a known host) don't input the password ( like .rhosts function in rlogin ) ? thx.

[T G Manikandan]

you can use another way like

you can define the user shell in /etc/shells file so that the user can rlogin

if you do not define the user shell in /etc/shells then the user will not be able to rlogin.

you can have all common users with a login shell and one specific user with a login shell different which is listed in the /etc/shells file