Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Message-ID:	<20010122150011.11113.qmail@web9906.mail.yahoo.com>
Date:	Mon, 22 Jan 2001 15:00:11 +0000 (GMT)
From:	=?iso-8859-1?q?Keith=20Starsmeare?= <keith_starsmeare AT yahoo DOT co DOT uk>
Subject:	Re: rsh -l doesn't require a password
To:	Jason Tishler <Jason DOT Tishler AT dothill DOT com>
Cc:	cygwin AT cygwin DOT com
MIME-Version:	1.0

--- Jason Tishler <Jason DOT Tishler AT dothill DOT com> wrote: 

> Since Cygwin's mkpasswd creates an empty pw_passwd field, the above
> code never calls iruserok().  Hence, any user is allowed rsh access.
> 
> I "fixed" the problem by inserting asterisks into the pw_passwd
> fields in my /etc/passwd file.  For example:
> 
>     jt:*:1004:513:Jason Tishler,S-1...
>        ^
>        +--- here

Thanks for the tip. That works for me!

> I never submitted a patch because it seems like the s-commands (i.e.,
> ssh) are much more in vogue then the r-commands (i.e., rsh) now a days.

I'm obviously too trusting!

Keith


____________________________________________________________
Do You Yahoo!?
Get your free @yahoo.co.uk address at http://mail.yahoo.co.uk
or your free @yahoo.ie address at http://mail.yahoo.ie

--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple

- Raw text -