🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.sgi.admin
Article #217

Root permissions puzzle

#217
From: Dave Schweisguth
Date: Thu, 28 Jan 1993 16:43
31 lines
1918 bytes
Hi all,

I manage a pair of equivalent (in the /etc/hosts.equiv sense) Irises. (All
the files and accounts I'll mention are identical on both by way of NFS or
rdist.) I've made a second root account for myself like so

dcs-root:snip:0:0:Dave Schweisguth:/usr/people/dcs:/usr/local/bin/tcsh

so that I can use my personal account with tcsh, aliases, etc. for admin and
leave the regular root account (with shell=/bin/csh and homedir=/, the SGI
defaults) as a backup in case NFS dies and I lose tcsh.

This is fine, but if I'm dcs-root on one machine and I rsh to the other, I
get the original (wrong shell and homedir) root account. If I'm dcs-root and
I "rsh dcs-root@foo" to the other, I need to provide my password. Either
way, it's obnoxious.

/etc/hosts.equiv presently contains "localhost" and the two Irises in
question, and /.rhosts lets in "root" from either machine. Adding "dcs-root"
to /.rhosts doesn't help. Adding it to my own ~/.rhosts (and chown'ing
~/.rhosts to root.sys) makes "rsh dcs-root@foo" work from either machine, but
also from the other non-trusted machines which I also need in my ~/.rhosts.

Can anyone think of a way to have my access and secure it too?

TIA,

--
| Dave Schweisguth   Yale MB&B & Chemistry   Net: dcs@neutron.chem.yale.edu |
| Lab phone: 203-432-5208     Fax: 203-432-6144    Home phone: 203-624-3866 |
| For complying with the NJ Right To Know Act:  Contents partially unknown. |
Technical Details
Message-ID: <1993Jan28.164345.12166@news.yale.edu>
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!yale.edu!news.yale.edu!neutron!dcs

Show Full Headers
Complete Article Headers
Newsgroups: comp.sys.sgi.admin,comp.unix.admin
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!yale.edu!news.yale.edu!neutron!dcs
From: dcs@neutron.chem.yale.edu (Dave Schweisguth)
Subject: Root permissions puzzle
Message-ID: <1993Jan28.164345.12166@news.yale.edu>
Sender: news@news.yale.edu (USENET News System)
Nntp-Posting-Host: neutron.chem.yale.edu
Organization: Yale University
X-Newsreader: TIN [version 1.1 PL8]
Date: Thu, 28 Jan 1993 16:43:45 GMT
Lines: 31