Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 15 Nov 96 16:36:00 PST
From:      Robert Clark <ROBERTC@PII.COM>
To:        "'freebsd-questions'" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Does RSH ignore ttys if .rhost present?
Message-ID:  <328D0CB7@smtp>

next in thread | raw e-mail | index | archive | help

I'm not sure of the gozinta and the gozouta, but you might be able to drive 
all three systems' serial ports  from the one UPS output.

Or null modem the systems together, and go tty to tty?

Be sure your network hub is on a UPS too, or the message may never get 
there.
     
                              [RC]

 ----------
From: owner-freebsd-questions
To: dwhite
Cc: questions
Subject: Re: Does RSH ignore ttys if .rhost present?
Date: Friday, November 15, 1996 6:57PM

> > I thought that if a .rhosts file was present then the ttys file
> > was ignored.  I have a .rhosts file in ~root , but I cannot rsh
> > to it.  Works fine with non root.  If it does not ignore ttys does
> > anyone know how to get it to do so if one exists?
> > thanks
>
> Somebody correct me on this, but doesn't this allow the root user on the
> remote machine to gain root access to your machine?  That doesn't sound
> like a great idea.
>
> What program are you trying to run though rsh?  Remember it actually logs
> in as root, so if the port isn't secure then it won't be permitted.

I don't really like the idea either, but here is my problem.
3 machines.  1 UPS.  Nice UPS 1400 APC.
I want to plug all three into it and when the primary one detects the
power out it can rsh to the others and shut them down before the battery
dies.  The primary would trust nobody.  The other two would trust only
the primary.  If anyone can think of another idea that does not involve
buying two more UPS then let me know.  I got the idea from the script
for upsd off of ftp.ww.com.

As per the secure port does this mean I would need to set ttyp0+ as
SECURE.  I really don't want to do that.  I was hoping that root could
log in from a untrusted port if the entry was in the .rhosts file.  I
know that this could be spoofed, but only the primary machine is important.
The other two are a workstation that I nuke every so often myself and
a test server to try stuff out on.

thanks for the help




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?328D0CB7>