[olug] remote password changes

[Ryan Stille]

I thought rsh was basically just using ssh.  If so then I don't think 
there would be more security concerns than there is for ssh.

As far as ps password sniffing, sometimes when I see something like 
mysql in the process list, its shown as 'mysql -uusername -pxxxxxx'.  I 
don't know if ps hides the password with the x's, or if thats something 
the client program can do.  Maybe passwd does this.  You'd also want to 
make sure it doesn't end up in a shell history file.

-Ryan

Will Langford wrote:
> you'll still have to deal with people seeing the `ps aux` rsh command on the
> originating system, though.  And instead of dealing with all of the rpc
> security problems, stick with just an ssh based solution would be simpler.
>
> -Will
>
> On 5/31/06, Ryan Stille <ryan at cfwebtools.com> wrote:
>   
>> Maybe it would be easier to just rsh (remote shell) to the remote
>> machines.
>>
>> Something like "rsh remote.machine.com passwd username new-password".  I
>> think you will still to use your authorized_keys like you mentioned to
>> avoid being prompted for the remote password.
>>
>> -Ryan
>>
>>
>> _______________________________________________
>> OLUG mailing list
>> OLUG at olug.org
>> http://lists.olug.org/mailman/listinfo/olug
>>
>>     
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> http://lists.olug.org/mailman/listinfo/olug
>
>