[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: rsh as root



On Fri, 01 Nov 2002, Pavel Jurus <jurus@cs.cas.cz> wrote...

: 
: I am playing with small cluster, the number of nodes is increasing however 
: and I just started to solve task of logging automatically to each node (or
: selected list) to reboot or shutdown machine. To do this in script I need 
: to use rsh as root without password, but I haven't figured out how to do
: it in Debian the right way. /etc/hosts.equiv doesn't help and I suspect
: it is disabled by pam configuration because it is of course huge security 
: hole in normal settings.

On some systems, "rsh" is actually a link to the "ssh" program..

% readlink -f /usr/bin/rsh
/usr/bin/ssh

It can be quite easy to set up ssh-as-root.

Create a ssh key (using ssh-keygen), copy the public part (the *.pub
file) into your /root/.ssh/authorized_keys file on all hosts.. and
there you go.
If this doesnt work, things to check are:
  - file permissions on /root/.ssh and /root/.ssh/authorized_keys
  - "PermitRootLogin" in /etc/ssh/sshd_config is set to
    "without-password" or "yes"

I find, when doing lots of ssh'ing, that both "dsh" and "fsh" can be
extremely useful.

: Could you please tell me "your way" of rebooting via script or give me some
: hints how to configure pam (it is in /etc/pam.d/rsh is suppose but I'm
: newbie to pam)?

I use the above method, with ssh keys.

I suspect you could also use HostBased authentication for this, but
I'm yet to get this working.

-- 
 >dopey!debian.org
 <http://www.debian.org/>



Reply to: