Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1463

Re: why does rsh -l ignore .rhosts?

Show all headers | View raw

Ralph <ralphzodapn@ymeal.com> wrote:
> I know rsh is old not used anymore, and ssh is the way to go, and rsh
> has security issues, but i'm just testing it on a small network of 2
> computers where i'm the only user and it's not open to the internet.

I'd still go with ssh, and if you want equivalence logins then set up
public/private certificates. (This is all "easy"... just ask if you're
struggling.)


> It's just for familiarity with it.

Mmm, I suppose. But why bother wasting life becoming familiar with
outdated, obsolete, and insecure software for which a better replacement
is available?


> My question Why is it that when you do rsh -l (to specify a different
> username than the current one) Why does it ignore .rhosts?

Fundamentally it's because the trust is applied on the client side, not
on the server, and the rsh application tries hard to pretend to be fair.


> http://linux.die.net/man/8/in.rshd
>   Also note that the design of the .rhosts system is COMPLETELY INSECURE
>   except on a carefully firewalled private network. Under all other
>   circumstances, rshd should be disabled entirely."

I'd go further than that and remove the clause "Under all other
circumstances" entirely.

Really, there are NO circumstances where rsh is better than ssh, and
many where ssh beats rsh hands down.

Chris

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

why does rsh -l ignore .rhosts? "Ralph" <ralphzodapn@ymeal.com> - 2012-06-05 11:41 +0000
  Re: why does rsh -l ignore .rhosts? Chris Davies <chris-usenet@roaima.co.uk> - 2012-06-05 21:57 +0100
    Re: why does rsh -l ignore .rhosts? "Ralph" <ralphzodapn@ymeal.com> - 2012-06-06 19:39 +0000
      Re: why does rsh -l ignore .rhosts? Jorgen Grahn <grahn+nntp@snipabacken.se> - 2012-06-07 08:03 +0000
      Re: why does rsh -l ignore .rhosts? Chris Davies <chris-usenet@roaima.co.uk> - 2012-06-07 10:21 +0100
  Re: why does rsh -l ignore .rhosts? MJ <me@invalid.org> - 2012-06-17 04:00 +0000

csiph-web