summaryrefslogtreecommitdiffstats
path: root/libexec
diff options
context:
space:
mode:
authorobrien <obrien@FreeBSD.org>2003-12-17 22:38:57 +0000
committerobrien <obrien@FreeBSD.org>2003-12-17 22:38:57 +0000
commitc9e8288e3498c7429f0fcf7f8500def163d0aa3b (patch)
tree97394bb027a6991c5b6d9d0ce0db943298d73ea5 /libexec
parentecc9efa2f1db04d89a2876067f9fdc32d6398439 (diff)
downloadFreeBSD-src-c9e8288e3498c7429f0fcf7f8500def163d0aa3b.zip
FreeBSD-src-c9e8288e3498c7429f0fcf7f8500def163d0aa3b.tar.gz
Document what the PAM believers failed to do (and should have),
which is how to rsh as root into a machine.
Diffstat (limited to 'libexec')
-rw-r--r--libexec/rshd/rshd.89
1 files changed, 9 insertions, 0 deletions
diff --git a/libexec/rshd/rshd.8 b/libexec/rshd/rshd.8
index b06cca9..42a6c58 100644
--- a/libexec/rshd/rshd.8
+++ b/libexec/rshd/rshd.8
@@ -247,6 +247,15 @@ environment.
A facility to allow all data exchanges to be encrypted should be
present.
.Pp
+Post-PAM, FreeBSD also needs the following patch applied besides
+properly configuring
+.Pa .rhosts .
+ --- etc/pam.d/rsh.orig Wed Dec 17 14:36:20 2003
+ +++ etc/pam.d/rsh Wed Dec 17 14:30:43 2003
+ @@ -9 +9 @@
+ -auth required pam_rhosts.so no_warn
+ +auth required pam_rhosts.so no_warn allow_root
+.Pp
A more extensible protocol (such as Telnet) should be used.
.Sh HISTORY
IPv6 support was added by WIDE/KAME project.
OpenPOWER on IntegriCloud