Using HP-UX Internet Services (August 2003)
Distributing Files Using rdist
Setting Up remsh
Chapter 5 41
In this example, dtlogin and the keyword, OTHER, indicate the service
name. The service name OTHER specifies the module for all those
applications that are not specified in the configuration file.
Enabling Standard UNIX Authentication on rexecd and remshd
Services
To use the rexec and remsh services enabled with PAM, add the
following entries to the /etc/pam.conf file:
rcomds auth required /usr/lib/security/libpam_unix.1
rcomds account required /usr/lib/security/libpam_unix.1
The remshd and rexecd services use these entries as configuration
information for authenticating users. Adding these entries in the
/etc/pam.conf file informs rexec and remsh to use the UNIX
authentication mechanism to authenticate the users.
A service (such as rexec, remsh), can have more than one entry in the
/etc/pam.conf file for each of the module types available. For more
information, type man 4 pam.conf at the HP-UX prompt.
Enabling DCE Integrated Logging Authentication
To enable DCE integrated logging authentication mechanism, add the
following entry to the /etc/pam.conf file:
rcomds auth required /usr/lib/security/libpam_dce.1
Using remshd in a Secure Internet Services Environment
The rexec service does not work in the Secure Internet Services (SIS)
environment. However, the remsh service works in the SIS environment.
To use remsh enabled with PAM in the SIS environment, add the
following entry to the /etc/pam.conf file.
rcomds auth required /usr/lib/security/libpam_dce.1
In the Kerberos environment, remsh contains command-line options for
combining UNIX method and Kerberos method of authentication. A
combination of both the Kerberos and UNIX authentication is available.