use of remsh command on hp-ux

[Sangeeta Gupta]

Hi,
I am working on hp-ux (itanium) .
1. I want to know if for using 'remsh' using rhosts file is a must.I have tried with hosts.equiv file but it doesnt work for me.

2. What is the security breach that can happen if i use rhosts file

Regards,
Sangeeta

[Pete Randall]

The hosts.equiv file is for all users except root. The root user is required to have a .rhosts file. The security risk is that anyone can now, potentially, log in as root.


Pete

[James R. Ferguson]

Hi Sangetta:

THe manpages for 'rhosts' (or 'hosts,equiv(4)' provide the information necessary to setup the appropriate file on your servers. You don't offer details of what "doesn't work".

As for the potential security implications, again the manpages offer that explanation too, under the warnings section.

Be sure that your DNS is functioning when you setup the '.rhosts' hostnames.

Regards!

...JRF...

[TwoProc]

Don't use remsh and rhosts. It's old, unsecure and a bad idea. Ditto hosts.equiv.

The more secure standard that has replaced that is ssh. You will have fully encrypted communication between servers that is not sniffable. You can create keys between servers that replace that whole ugly .rhosts mess.

[Peter Nikitka]

Hi,

keep in mind, that /etc/hosts.equiv is for all users but root; set the permissions on this file to 644.

mfG Peter

PS: I recommend 'ssh' as the collegues before, nevertheless.

[Reshma Malusare]

Hi Sangeeta,

1.~/.rhosts --> User Equivalency (rw----)
[password free access to users]
So,for using Berkeley services like remsh,rcp,rlogin rhosts file is must.

2./etc/hosts.euiv --> System Equivalency
(r-r-r) It gives password free access to root,which will may create some Security issues.
so, I will suggest better go for SSH which is secure shell for encrypted data transfer.

[Steven E. Protter]

Shalom,

Note that secure shell, based on openssh can do everything remesh and the r-tools can do except.

[Reshma Malusare]

Hi Sangeeta,
if your query is solved then please close the thread & assign points to replies.