Disabling defaults on ftp and rlogin 1

[wags22]

I am in charge of two simulation networks, one is composed of a Linux simulation host with a Linux slave machine (both RHL 7.2) and windowsNT/2k workstations. The other is a Linux host and Linux workstations (all are RHL 7.3). Previous versions of the simulations were HP-Unix based.

I routinely used rlogin and ftp to transfer files and do remote shutdowns on the HP systems. I would like to be able to do the same things on the Linux systems. However, I've found that rlogin is by default disabled for root user (I've figured this one out already), ftp only puts you in the ftp directory, and passwords are still required to login.

Can anyone tell me how to 1) disable password login requirement ie make a system trusted for remote login; and 2) let an ftp login browse the entire file system, not just the ftp directory.

Thank you for any help.

Wags

 

[weevilofdoom]

well, if you're a root user, you can explore the entire filesystem anyways via FTP, no problem, you'd just need the password, unless the root password was NULL, which, of course, would not be a good thing rlogin, I'm not sure about, never used it, so I can't help you, and also, why get rid of passwords for an FTP? that'd be a pretty bad security risk, IMO, but anyways, if you're root, you CAN explore the entire filesystem... "cd /" puts you at the / directory, etc The weevil of doooooooooom
-The eagle may soar, but the weasel never gets sucked up by a jet engine (Anonymous)

 

[wags22]

Ok, I checked it out and you're correct about being able to ftp and see everything as root. My problem yesterday was that I wasn't even able to get logged in as root with ftp. My reason for needing it is to be able to move files from one machine to another w/o having to worry about who owns the files. My system doesn't touch the outside world so as long as I don't hand out my admin passwords to simulation pucksters it's not a security issue.

One problem I'm still having. How do I get remote login with no password checking from one machine to another? I want this capability to be able to run scripts for shutdown and other admin functions.

Thanks again.
Wags

 

[Morsing]

To use ftp without passwords, create a file .netrc in the clients home dir.

.netrc: (permissions 600)

machine myownmachine
login myusername
password mypassword

To use rlogin without password, create a file .rhosts (or global file /etc/hosts.equiv) in the users remote home dir.

.rhosts: (permissions 600)

hostname user

These methods are a little security risk (mostly .rhosts) but it's not too bad.

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[wags22]

Ok, let me go through this one more time and explain what I'm trying to do.

My systems are completely isolated from the outside world. The only security risk I have to worry about is user sitting in front of one of my terminals in my building. My only concern with them is that they are on Win2k machines that even when they are logged in as a non admin user, the command prompt grants admin privileges when using telnet, ftp, etc.

I do not want to take away password usage on ftp, I only wanted that for rlogin and rcp. I do want to be able to use ftp to transfer files though. Right now the problem I'm having is that I can't even login on any user name with ftp. I can do anonymous login but that puts me in var/ftp which is of no use to me.

The two machines I'm working with are my primary simulation servers. They are duplicates, I need to copy files from one to the other as a way of backing up my simulation files and keeping the second machine's data current. I have them connected via a crossover cable on a separate ip from the other nic cards in them. I need to be able to ftp files back and forth as users root, soc, or mds to or from any directory I wish. Can anyone explain to me how I can setup ftp to allow me to do this?

Thanks again.
Wags

 

[smah]

Most FTP server software doesn't allow root access by default for security reasons. See if you have /etc/ftpusers and what's in there.

 

[Morsing]

/etc/ftpusers and ftpaccess are the main configuration files. Have a look in there.

Cheers Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support