Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Message-ID:	<FF503547C1F8D211BD2C0008C7C564010C9A4902@exdkba06.novo.dk>
From:	"JHJE (Jan Holst Jensen)" <jhje AT novonordisk DOT com>
To:	"'cygwin AT cygwin DOT com'" <cygwin AT cygwin DOT com>
Subject:	1.3.3: problem running rsh without password; .rhosts seems to be
	ignored.
Date:	Fri, 5 Oct 2001 15:52:27 +0200
MIME-Version:	1.0
X-Mailer:	Internet Mail Service (5.5.2653.19)

I have downloaded the cygwin 1.3.3 complete release on Windows 2000 Advanced
Server (SP 2), and configured inetutils-1.3.2. The "Cygwin inetd" service is
now running as LocalSystem. The server is not part of a domain and currently
only has the account Administrator.

I can login using telnet from a Linux box, no problems. I can also use rsh
from same Linux box with a simple "rsh -l administrator machinename"; it
then prompts me for a password, and I am then logged in for an interactive
session.

However, trying to do "rsh -l administrator machinename cat test.txt" fails
with a "Permission denied" (I have created a .rhosts file in
/home/Administrator with "+" as the only contents). I am aware of the issues
with the NT security model, so I would guess that you would need to store
the user's password somewhere in order for the inetd daemon to switch user
context without prompting for a password. At least this is the way MS
Interix (formerly OpenNT) tries to implement a workaround. Sadly however, I
can't make that work either, thus my adventures into cygwin-land :-) (a
pleasant one so far).

Do the cygwin daemons support rsh and rcp without password authentication at
all ? I read some snippets in the mailing list archives that have led me to
believe that it may have worked in previous releases.

best regards

-- Jan Holst Jensen, Novo Nordisk A/S, Denmark

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -