Re: why does rsh -l ignore .rhosts?

Ralph <ralphzodapn@xxxxxxxxx> wrote:
I know rsh is old not used anymore, and ssh is the way to go, and rsh
has security issues, but i'm just testing it on a small network of 2
computers where i'm the only user and it's not open to the internet.

I'd still go with ssh, and if you want equivalence logins then set up
public/private certificates. (This is all "easy"... just ask if you're
struggling.)


It's just for familiarity with it.

Mmm, I suppose. But why bother wasting life becoming familiar with
outdated, obsolete, and insecure software for which a better replacement
is available?


My question Why is it that when you do rsh -l (to specify a different
username than the current one) Why does it ignore .rhosts?

Fundamentally it's because the trust is applied on the client side, not
on the server, and the rsh application tries hard to pretend to be fair.


http://linux.die.net/man/8/in.rshd
Also note that the design of the .rhosts system is COMPLETELY INSECURE
except on a carefully firewalled private network. Under all other
circumstances, rshd should be disabled entirely."

I'd go further than that and remove the clause "Under all other
circumstances" entirely.

Really, there are NO circumstances where rsh is better than ssh, and
many where ssh beats rsh hands down.

Chris
.

Relevant Pages

  • Re: Anyone used Solaris Secure Shell, Suns productized ssh for Solaris9?
    ... >Why not engineer even an isolated network to be reasonably secure, ... I don't see why ssh provides all that much ... security benefit over rsh _if_ your network is physically secure. ...
    (comp.security.ssh)
  • Re: How to configure SSH with no paswords
    ... |>> I have a problem in configuring ssh without passwords. ... OpenSSH supports this, but not all SSH do. ... |> Is the network in this cluster really unsecure? ... If not, you could use rsh. ...
    (comp.security.unix)
  • Windows question
    ... Is there a Windows utility like ssh or rsh that a Win ... machine can log into a linux machine on the same ...
    (alt.os.linux)
  • Re: [fw-wiz] Is NAT in OpenBSD PF UPnP enabled or Non UPnP?
    ... >> I start by not giving logins and SSH access to users I don't trust. ... a network topology which goes around the ... >> firewall and thus is a serious hole to network security. ... >> have access via UPnP to, well, anything that device might happen to ...
    (Firewall-Wizards)
  • Re: Security Breached
    ... I have a typical home network that looks like this: ... on both the DMZ and port forward questions. ... I have the vnc port blocked at the router so I presumed it was safe to ... they done it port forwarding over SSH (if your assumption of only SSH ...
    (alt.computer.security)