Subject: Re: rexecd
To: John Nemeth <jnemeth@victoria.tc.ca>
From: Sean Davis <dive@endersgame.net>
List: tech-userlevel
Date: 02/22/2005 05:20:21
On Mon, Feb 21, 2005 at 07:04:51PM -0800, John Nemeth wrote:
> On Jul 14, 3:58pm, Sean Davis wrote:
> } On Mon, Feb 21, 2005 at 05:43:15PM -0800, Simon J. Gerraty wrote:
> } >
> } > > BTW, FreeBSD doesn't allow root to use rexecd. Should we add that
> } > >as well?
> } >
> } > Why allow it at all - it sends username/passwd in clear ?
> }
> } So does rsh, and rsh is still quite useful on LANs for things like rdist, if
> } you can trust your physical connections.
>
> rsh doesn't send the password. rshd just checks to make sure the
> connection is originating on a "privileged" port and assumes that the
> client isn't lying.
I stand corrected.
- Sean
--
_
( ) ASCII Ribbon Campaign
X
/ \ For Plain Text Email