[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to "rsh" but keep original user's environment?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

"Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE> writes:

> I need to rsh into a different account on another local host, but keep
> my original environment. The user should NOT be prompted for a
> password (this is easy, using .rhost).
> 
> The problem I'm facing is that on the remote machine I don't have my
> original environment but that of the remote user.

I'm making a wild assumption that primarily the part of your environment 
you're interested in is $DISPLAY.

Use ssh.  It'll do x forwarding.  In addition to that, you can use RSA
authentication instead of .rhosts to achieve passwordless authentication.
Using .rhosts is inherently insecure[1].  

[1] Take for example my recent escapade[2].  Somebody else left themselves
logged into one computer.  I wanted their login on another computer.  They
have an NFS-mounted home directory.  So what do I do?  Create the appropriate
.rhosts entry and I've got access to another box. :)
[2] This was utterly legitimate.  It was a friend's computer and I was
demonstrating why the r(sh|login|...) tools were bad.
- -- 
Graeme.
graeme+sig@mathie.cx

"Life's not fair," I reply. "But the root password helps." - BOFH
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard <http://www.gnupg.org/>

iD8DBQE5Gc4cPjGH3lNt65URAopuAKDP8dsqTZKgLrwlKMnibt/cFyG32wCgiXu6
hTFwN0719ZNuLLgDI1kz+oY=
=4FGq
-----END PGP SIGNATURE-----



Reply to: