Does /usr/bin/rlogin do a keylogin ?

Does /usr/bin/rlogin do a keylogin ?

Post by Roland Main » Wed, 08 Dec 1999 04:00:00



Hi !

----

Is it guranteed that /usr/bin/rlogin does a "keylogin" ?
Seems that I have problems with secure NFS and "rlogin". After some
hours not logged in on a machine a following "rlogin" (with an entry in
~/.rhosts, e.g. no password chat) some strange access problems occur
when accessing secure NFS dirs...

----

Bye,
Roland

--
  __ .  . __


  /O /==\ O\  MPEG specialist, C&&JAVA&&Sun&&Unix programmer
 (;O/ \/ \O;) TEL +49 (0) 641/99-13193 FAX +49 (0) 641/99-41359

 
 
 

Does /usr/bin/rlogin do a keylogin ?

Post by Neil W Ricker » Wed, 08 Dec 1999 04:00:00




>> > Seems that I have problems with secure NFS and "rlogin". After some
>> > hours not logged in on a machine a following "rlogin" (with an entry in
>> > ~/.rhosts, e.g. no password chat) some strange access problems occur
>> > when accessing secure NFS dirs...
>> How do you plan to do a keylogin with no password?
>Mhhh, I don't know the magic behind the scenes but I thougth "rlogin" does
>everytimes do a "keylogin".

If you don't give it a password, then it cannot keylogin.

Quote:>But it seems that "keylogin" is skipped if I enter the machine using rlogin
>with a ~/.rhosts entry ;-(  - making the usage of rsh/rlogin/secure NFS very
>problematic (anyway - using ~/.rhosts and secure NFS at the same time is a
>paradoxon from vthe view of a "secure system").

If the home directory uses secure NFS, this is not much of a
problem.  If rlogin cannot read your home directory it will not find
the '.rhosts', so you will be asked for a password and then there
will be a keylogin.  However, if you are already keylogged in
(keyserv holds your secure nfs key), then your '.rhosts' will be
found, you will be logged in, and no keylogin is required.

What doesn't work is '/etc/hosts.equiv', since that is always visible
even when your home directory is not.

Quote:>To answer you question: I don't know. But it would be nice if someone knows
>a way to do this magic...
>BTW: Does slogin from ssh2 do a keylogin ?

ssh1 will do a keylogin if you use password based authentication.
But ssh2 won't.  I believe it is in the wish list of things planned
for the future.

 
 
 

Does /usr/bin/rlogin do a keylogin ?

Post by Roland Main » Thu, 09 Dec 1999 04:00:00


Hi !

----

[Don't send me email copies of news postings]


> > Seems that I have problems with secure NFS and "rlogin". After some
> > hours not logged in on a machine a following "rlogin" (with an entry in
> > ~/.rhosts, e.g. no password chat) some strange access problems occur
> > when accessing secure NFS dirs...

> How do you plan to do a keylogin with no password?

Mhhh, I don't know the magic behind the scenes but I thougth "rlogin" does
everytimes do a "keylogin".
But it seems that "keylogin" is skipped if I enter the machine using rlogin
with a ~/.rhosts entry ;-(  - making the usage of rsh/rlogin/secure NFS very
problematic (anyway - using ~/.rhosts and secure NFS at the same time is a
paradoxon from vthe view of a "secure system").

To answer you question: I don't know. But it would be nice if someone knows
a way to do this magic...
BTW: Does slogin from ssh2 do a keylogin ?

----

Bye,
Roland

--
  __ .  . __


  /O /==\ O\  MPEG specialist, C&&JAVA&&Sun&&Unix programmer
 (;O/ \/ \O;) TEL +49 (0) 641/99-13193 FAX +49 (0) 641/99-41359

 
 
 

Does /usr/bin/rlogin do a keylogin ?

Post by Roland Main » Sat, 11 Dec 1999 04:00:00


Hi !

----




> >> > Seems that I have problems with secure NFS and "rlogin". After some
> >> > hours not logged in on a machine a following "rlogin" (with an entry in
> >> > ~/.rhosts, e.g. no password chat) some strange access problems occur
> >> > when accessing secure NFS dirs...

> >> How do you plan to do a keylogin with no password?

> >Mhhh, I don't know the magic behind the scenes but I thougth "rlogin" does
> >everytimes do a "keylogin".

> If you don't give it a password, then it cannot keylogin.

OK, /usr/bin/keylogin won't work. But the API /usr/bin/keylogin is used may be
mis-used (if it is a public interface...).

----

Quote:> >But it seems that "keylogin" is skipped if I enter the machine using rlogin
> >with a ~/.rhosts entry ;-(  - making the usage of rsh/rlogin/secure NFS very
> >problematic (anyway - using ~/.rhosts and secure NFS at the same time is a
> >paradoxon from vthe view of a "secure system").

> If the home directory uses secure NFS, this is not much of a
> problem.  If rlogin cannot read your home directory it will not find
> the '.rhosts', so you will be asked for a password and then there
> will be a keylogin.  However, if you are already keylogged in
> (keyserv holds your secure nfs key), then your '.rhosts' will be
> found, you will be logged in, and no keylogin is required.

But (AFAIK) keyserv only holds the credentials for some hours (8.3h !?)...

----

Quote:> What doesn't work is '/etc/hosts.equiv', since that is always visible
> even when your home directory is not.

> >To answer you question: I don't know. But it would be nice if someone knows
> >a way to do this magic...
> >BTW: Does slogin from ssh2 do a keylogin ?

> ssh1 will do a keylogin if you use password based authentication.
> But ssh2 won't.  I believe it is in the wish list of things planned
> for the future.

Sure ?? Very sure ? I tried slogin with ssh2 2.0.13 after not beeing logged-in
on a machine for 26 hours, and access to the secure NFS dirs was granted...

----

Bye,
Roland

--
  __ .  . __


  /O /==\ O\  MPEG specialist, C&&JAVA&&Sun&&Unix programmer
 (;O/ \/ \O;) TEL +49 (0) 641/99-13193 FAX +49 (0) 641/99-41359

 
 
 

Does /usr/bin/rlogin do a keylogin ?

Post by Casper H.S. Dik - Network Security Engine » Sat, 11 Dec 1999 04:00:00


[[ PLEASE DON'T SEND ME EMAIL COPIES OF POSTINGS ]]


>But (AFAIK) keyserv only holds the credentials for some hours (8.3h !?)...

There are no provisions in the rlogin protocol to send the credentials
over the wire to the new system.  (Teh rlogin protocol is not extensible;
nor does it do encryption and sending the credentials in the clear wouldn't
be wise either.

Casper
--
Expressed in this posting are my opinions.  They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.

 
 
 

1. /usr/bin, /usr/local/bin, /sbin or /opt/bin, /var/opt/bin - I'm confused.

Hi all,

All these directories are for executable binary, right ?  How does one
decide which executable binary goes to which directory ?

/usr/bin : For what ?
/usr/local/bin:  for what ?
/sbin : ??
/opt/bin : ??
/var/opt/bin : ??

Is there any other /bin beside those above ?

Thanks

2. Q: quota

3. /usr/bin/ls /usr/ucb/ls /usr/local/bin/ls

4. Problems getting LDAP configured and working...

5. /bin /usr/bin /usr/local/bin etc

6. HELP ON PPPD NEEDED!!

7. /usr/xpg4/bin/more show garbage when reading DOS-style files

8. Intel 845G

9. HELP: Connectivity between DOS/DOS and DOS/Linux

10. diff. between /usr/vac/bin/xlc & /usr/bin/xlc

11. /usr/local/bin/perl ->/usr/bin/perl

12. Why does "cd /usr/////bin" = "cd /usr/bin"?

13. /usr/dt/bin/dtksh and /usr/bin/ksh