I'm not sure a double "+" is supported on all platforms.

How about opening it up to all machines but only allowing one special non-root user?

+ rshuser

Then have the users specify the special user on their command line:
rsh -l rshuser somehost somecmd

++++++++++++++++++++++++++++++++++++++++++++++++++++

>From a Solaris man page:

     The special character `+' can be used  in  place  of  either
     hostname or username to match any host or user. For example,
     the entry

     +

     will allow a user from any remote host to access the  system
     with the same username. The entry

SunOS 5.9           Last change: 23 Jun 1997                    2

File Formats                                       hosts.equiv(4)

     + username

     will allow the named user from any remote host to access the
     system. The entry

     hostname +

     will allow any user from the named host to access the system
     as the local user.



-----Original Message-----
From: Herbert Graf <hgraf@email.com>
Sent: Nov 14, 2005 3:37 PM
To: "Microcontroller discussion list - Public." <piclist@mit.edu>
Subject: [EE] Opening up rsh on linux

Hello all, here's an odd question, but hopefully someone here will be
able to help.

I have a farm of machines on a trusted network that need rsh access
(Linux Redhat 7.3).

I've enabled rsh and all is working, but the problem is twofold: rsh
requires the machine I'm connecting from to have it's IP in hosts.equiv,
and it needs the user to exist.

Since a variety of users from a variety of hosts will be connecting to
these machines I need to open up rsh on them to allow connections from
any user from any host to work (including users that don't exist on that
particular farm machine).

Any ideas?

The man page of hosts.equiv says adding + + should do it, but it doesn't
appear to work.

I've tried numerous google searches but since most people want to
INCREASE the security of their boxes I'm swimming against the
current! :)

Thanks for any help.

TTYL


-----------------------------
Herbert's PIC Stuff:
http://repatch.dyndns.org:8383/pic_stuff/

-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist



-- 
http://www.piclist.com PIC/SX FAQ & list archive
View/change your membership options at
http://mailman.mit.edu/mailman/listinfo/piclist