From owner-freebsd-security Wed Mar 27 10:43:23 2002 Delivered-To: freebsd-security@freebsd.org Received: from proxy.centtech.com (moat.centtech.com [206.196.95.10]) by hub.freebsd.org (Postfix) with ESMTP id 6CDFE37B419 for ; Wed, 27 Mar 2002 10:43:17 -0800 (PST) Received: from sprint.centtech.com (sprint.centtech.com [10.177.173.31]) by proxy.centtech.com (8.11.6/8.11.6) with ESMTP id g2RIhGK29462; Wed, 27 Mar 2002 12:43:16 -0600 (CST) Received: from centtech.com (proton [10.177.173.77]) by sprint.centtech.com (8.9.3+Sun/8.9.3) with ESMTP id MAA18368; Wed, 27 Mar 2002 12:43:15 -0600 (CST) Message-ID: <3CA21285.9AD3074F@centtech.com> Date: Wed, 27 Mar 2002 12:42:13 -0600 From: Eric Anderson Reply-To: anderson@centtech.com Organization: Centaur Technology X-Mailer: Mozilla 4.79 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en MIME-Version: 1.0 To: Fernan Aguero Cc: FreeBSD Security Subject: Re: using ssh to run remote commands? References: <20020327152947.B443@iib.unsam.edu.ar> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Running remote commands with SSH is the same as running them with rsh. Examples: User A wants to run App on HOST as him/herself: As User A: ssh HOST App User A wants to run App on HOST as User B: ssh userb@HOST App You just have to make sure you set your keys up on the corresponding side. SSH's manpage is pretty decent and should help you with all that stuff. ssh should be pretty much a drop in replacement for rsh. Eric Fernan Aguero wrote: > > I'd like to know how to run remote commands using ssh. > I know I can do it as myself, but I'd like to know how can I set up my > systems to allow non-login users (root, operator, amanda) to run > remote commands on other hosts. > > Specifically, I want to now how can i run restore on the backup server > (the one holding the tape drive) to recover full filesystems to a > remote host. > Obviously this should be done as either root or some other privileged > user. > > All examples point to rsh, and I'd like to know if this can be done > securely using ssh. > > Thanks in advance for any comments or pointers, > > Fernan > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message -- ------------------------------------------------------------------ Eric Anderson Systems Administrator Centaur Technology You have my continuous partial attention ------------------------------------------------------------------ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message