Great Circle Associates Firewalls
(September 1993)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RSH name lookups
From: Steve Kennedy <steve @ gbnet . org>
Date: Thu, 23 Sep 93 0:53:49 GMT
To: greatcircle . com!firewalls @ gbnet . org

What is the defined way of performing RSH authentication ?

If I have a PC which does an rsh or rexec to a UN*X host (currently not
running DNS, but shortly will). How should the UN*X host authenticate
the remote rsh/rexec.

1) Check the NAME of the requestor is in the host file (or known about by
DNS).

2) Check if the NAME of the requestor is in the hosts.equiv

3) Check if the NAME of the requestor is in the users .rhost file.

Should the UN*X host also do a reverse name lookup - to ensure the NAME
translates back to the IP address that the request has come from.

Is this in an RFC ?

Thanks

Steve
-- 
 ___  |_  ___        ___  Tel: +44 (0)71 483 1169 Voice
(___  |  (___) \  / (___) Data: 483 2454 WorldBlazer T3000 PEP+/v32bis... 
 ___) |  (___   \/  (___  Data: 483 2455 WorldBlazer T3000 V32bis/PEP+...
                          ISDN: 722 7969/70
Email                                                            Snail Mail
steve @
 gbnet .
 {org,com,net}                [home]               Steve Kennedy
steve @
 marvin .
 demon .
 co .
 uk  [DIS dialup internet]        Flat 2, 43 Howitt Rd
stevek @
 cellnet .
 co .
 uk                     [work]             London, NW3 4LU



Indexed By Date Previous: Re: SMTP - reverse lookups OK (was Re: Access control from SMTP)
From: Christophe Wolfhugel <Christophe . Wolfhugel @ grasp . insa-lyon . fr>
Next: Re: RSH name lookups
From: Brent Chapman <brent @ GreatCircle . COM>
Indexed By Thread Previous: Re: SMTP - reverse lookups OK (was Re: Access control from SMTP)
From: Christophe Wolfhugel <Christophe . Wolfhugel @ grasp . insa-lyon . fr>
Next: Re: RSH name lookups
From: Brent Chapman <brent @ GreatCircle . COM>

Google
 
Search Internet Search www.greatcircle.com