Establishing user equivalence
User equivalence allows a user to use rlogin
to log in to an equivalent account on another host without entering
a password. SCOadmin managers require this equivalence to allow
you to manage other systems over the network. You can
establish user equivalence between:
-
individual remote/local account pairs by using the
User Equivalence Manager
to alter a user's $HOME/.rhosts file to add the
remote host and account.
-
a remote account and all local accounts except root (and
other non-individual accounts such as bin), by
editing /etc/hosts.equiv to add the remote host and account.
-
all accounts on a remote host and all local accounts except
root (and other non-individual accounts)
by editing /etc/hosts.equiv to add only the remote host name.
NOTE:
Entries in /etc/hosts.equiv can create large holes in system
security. Be sparing in their use. In most circumstances,
it is unwise to create entries that allow all users on remote
hosts to access all accounts on your local host.
If there are entries in both .rhosts and /etc/hosts.equiv
for the same host or host/account combination,
then the entry from /etc/hosts.equiv
determines the extent of user equivalence. For more information,
see the manual page for
rhosts(SFF).
Next topic:
The User Equivalence Manager interface
Previous topic:
Creating subnets
© 2007 The SCO Group, Inc. All rights reserved.
SCO OpenServer Release 6.0.0 -- 05 June 2007