Mailing-List: contact cygwin-help@sourceware.cygnus.com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe@sources.redhat.com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin@sources.redhat.com>
List-Help: <mailto:cygwin-help@sources.redhat.com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner@sources.redhat.com
Delivered-To: mailing list cygwin@sources.redhat.com
Message-ID: <20010122150011.11113.qmail@web9906.mail.yahoo.com>
Date: Mon, 22 Jan 2001 15:00:11 +0000 (GMT)
From: =?iso-8859-1?q?Keith=20Starsmeare?= <keith_starsmeare@yahoo.co.uk>
Subject: Re: rsh -l doesn't require a password
To: Jason Tishler <Jason.Tishler@dothill.com>
Cc: cygwin@cygwin.com
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit


--- Jason Tishler <Jason.Tishler@dothill.com> wrote: 

> Since Cygwin's mkpasswd creates an empty pw_passwd field, the above
> code never calls iruserok().  Hence, any user is allowed rsh access.
> 
> I "fixed" the problem by inserting asterisks into the pw_passwd
> fields in my /etc/passwd file.  For example:
> 
>     jt:*:1004:513:Jason Tishler,S-1...
>        ^
>        +--- here

Thanks for the tip. That works for me!

> I never submitted a patch because it seems like the s-commands (i.e.,
> ssh) are much more in vogue then the r-commands (i.e., rsh) now a days.

I'm obviously too trusting!

Keith


____________________________________________________________
Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple