1
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 4//EN">
3
<TITLE>Administration Reference</TITLE>
4
<!-- Begin Header Records ========================================== -->
5
<!-- /tmp/idwt3672/auarf000.scr converted by idb2h R4.2 (359) ID -->
6
<!-- Workbench Version (AIX) on 3 Oct 2000 at 16:18:30 -->
7
<META HTTP-EQUIV="updated" CONTENT="Tue, 03 Oct 2000 16:18:29">
8
<META HTTP-EQUIV="review" CONTENT="Wed, 03 Oct 2001 16:18:29">
9
<META HTTP-EQUIV="expires" CONTENT="Thu, 03 Oct 2002 16:18:29">
11
<!-- (C) IBM Corporation 2000. All Rights Reserved -->
12
<BODY bgcolor="ffffff">
13
<!-- End Header Records ============================================ -->
14
<A NAME="Top_Of_Page"></A>
15
<H1>Administration Reference</H1>
16
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf228.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Bot_Of_Page"><IMG SRC="../bot.gif" BORDER="0" ALT="[Bottom of Topic]"></A> <A HREF="auarf230.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
18
<H2><A NAME="HDRRSH" HREF="auarf002.htm#ToC_243">rsh (AFS version)</A></H2>
19
<A NAME="IDX5428"></A>
20
<A NAME="IDX5429"></A>
21
<A NAME="IDX5430"></A>
22
<A NAME="IDX5431"></A>
23
<A NAME="IDX5432"></A>
24
<P><STRONG>Purpose</STRONG>
25
<P>Opens a shell on a remote machine
26
<P><STRONG>Synopsis</STRONG>
27
<PRE><B>rsh</B> <VAR>host</VAR> [<B>-n</B>] [<B>-l</B> <<VAR>username</VAR>>] <<VAR>command</VAR>>
29
<VAR>host</VAR> [<B>-n</B>] [<B>-l</B> <<VAR>username</VAR>>] <<VAR>command</VAR>>
31
<P><STRONG>Description</STRONG>
32
<P>The AFS-modified <B>rsh</B> program functions like the standard UNIX
33
<B>rsh</B> program, but also passes the issuer's AFS token to the
34
remote machine's Cache Manager, to enable authenticated access to the AFS
35
filespace via that machine.
36
<P>Token passing is most effective if both the remote machine and local
37
machine belong to the same cell, because the <B>rsh</B> program can pass
38
only one token even if the user has several tokens--it passes the token
39
listed first in the output from the <B>tokens</B> command. If the
40
remote and local machine do not belong to the same cell, the first token must
41
be valid for the remote machine's cell, in order for the remote
42
cell's server processes to recognize the issuer as authenticated.
43
<P>In addition to running the AFS version of the <B>rsh</B> binary on the
44
machine where the <B>rsh</B> command is issued, other configuration
45
changes are necessary for token passing to work properly. See the
46
<B>Cautions</B> section for a list.
47
<P>The AFS version of the <B>rsh</B> command is compatible with the
48
standard UNIX <B>inetd</B> command, but token passing works only if both
49
programs are modified to handle AFS tokens. If only one of them is
50
modified, the issuer accesses the AFS filespace through the remote machine as
51
the user <B>anonymous</B>.
52
<P><STRONG>Cautions</STRONG>
53
<P>Some operating systems assign an alternate name to this program, such as
54
<B>remsh</B>. The version included in the AFS distribution uses the
55
same name as the operating system.
56
<P>The AFS distribution does not include an AFS-modified version of this
57
command for every system type, in some cases because the operating system
58
vendor has already modified the standard version in the required way.
59
For details, see the <I>IBM AFS Release Notes</I>.
60
<P>For security's sake, use the AFS version of the <B>rsh</B> command
61
only in conjunction with PAGs, either by using an AFS-modified login utility,
62
issuing the <B>pagsh</B> command before obtaining tokens, or including the
63
<B>-setpag</B> flag to the <B>klog</B> command.
64
<P>Several configuration requirements and restrictions are necessary for token
65
passing to work correctly with the AFS version of the <B>rsh</B>
66
command. Some of these are also necessary with the standard UNIX
67
version, but are included here because the issuer used to AFS protections is
68
possibly unlikely to think of them. There are possibly other UNIX-based
69
requirements or restrictions not mentioned here; consult the UNIX manual
70
page for the <B>rsh</B> command. (One important one is that no
71
<TT>stty</TT> commands can appear in the issuer's shell initialization
72
file, such as the <B>.cshrc</B> file.)
73
<P>The requirements and restrictions for token passing include the
76
<P><LI>The local machine must be running the AFS version of the <B>rsh</B>
77
command, with the binary file locally installed to grant setuid privilege to
78
the owner, the local superuser <B>root</B>.
79
<P><LI>The remote machine must be running the AFS version of the <B>inetd</B>
81
<P><LI>If the <B>rsh</B> command is to consult an <B>.rhosts</B>
82
file on the remote machine, the file must have UNIX mode bits no more liberal
83
than <B>-rw-r--r--</B>. If the <B>.rhosts</B> file
84
resides in a user home directory in AFS, the home directory must also grant
85
the <B>l</B> (<B>lookup</B>) and <B>r</B> (<B>read</B>)
86
permissions to the <B>system:anyuser</B> group.
88
<P><STRONG>Options</STRONG>
89
<P>Consult the UNIX manual page for the <B>rsh</B> command.
90
<P><STRONG>Privilege Required</STRONG>
92
<P><STRONG>Related Information</STRONG>
93
<P><A HREF="auarf179.htm#HDRINETD">inetd (AFS version)</A>
94
<P><A HREF="auarf235.htm#HDRTOKENS">tokens</A>
95
<P>UNIX manual page for <B>rsh</B> or <B>remsh</B>
96
<P><I>IBM AFS Release Notes</I>
98
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf228.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Top_Of_Page"><IMG SRC="../top.gif" BORDER="0" ALT="[Top of Topic]"></A> <A HREF="auarf230.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
99
<!-- Begin Footer Records ========================================== -->
101
<br>© <A HREF="http://www.ibm.com/">IBM Corporation 2000.</A> All Rights Reserved
103
<!-- End Footer Records ============================================ -->
104
<A NAME="Bot_Of_Page"></A>
added
removed
doc/html/AdminReference/auarf229.htm
