Subject: Re: rexecd
To: Sean Davis <dive@endersgame.net>
From: John Nemeth <jnemeth@victoria.tc.ca>
List: tech-userlevel
Date: 02/21/2005 19:04:51
On Jul 14, 3:58pm, Sean Davis wrote:
} On Mon, Feb 21, 2005 at 05:43:15PM -0800, Simon J. Gerraty wrote:
} >
} > > BTW, FreeBSD doesn't allow root to use rexecd. Should we add that
} > >as well?
} >
} > Why allow it at all - it sends username/passwd in clear ?
}
} So does rsh, and rsh is still quite useful on LANs for things like rdist, if
} you can trust your physical connections.
rsh doesn't send the password. rshd just checks to make sure the
connection is originating on a "privileged" port and assumes that the
client isn't lying.
}-- End of excerpt from Sean Davis