Remote access in a Trusted HP-UX system

[Enrico Venturi]

Hello again,
are there any restrictions on the remote access between machines in a trusted environment?
I mean: is it still possible to use the .rhosts file to "open" the machines each other?
Arethere any doc. to summarize the main "restrictions"?

thanks again
Enrico

[Jeff Schussele · Accepted solution]

Hi Enrico,

No, there are no restrictions on remote access introduced by the conversion to Trusted. Same rules still apply.

Rgds,
Jeff

[Pete Randall]

Enrico,

The trusted environment only affects the handling of the password file. There should be no impact or "r" utilities.


Pete

[Marco Santerre]

No, trusted mode doesn't stop you from using r-commands. So yes you can still define a .rhosts and use it in your Trusted environment. Actually you can even come from a non-trusted mode environement as well.

[Steven E. Protter]

Trusted system makes the users passwords more secure by shadowing them. They are moved from /etc/passwd to the /tcb folder into multiple files.

It does not in any way effect your ability to run insecure Berkley r- protocols.

Doing so after trusted system is a contradiction, but if you want to use Ignite, for example, thats what you have to do.

SEP

[Lee Huei]

refer to the link below:
http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/67-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/67-toc.html&searchterms=trusted%7cremote&queryid=20031117-031115

Chapter 8: Administering a System: Managing System Security

Trusted System Security

the remote access that can still be used in trusted environment:
remshd Remote shell server daemon; see remshd(1M)
rlogind Remote login server daemon; see rlogind(1M)