hosts.equiv.4 (2010 09)
h
hosts.equiv(4) hosts.equiv(4)
+ -chm
hostB
Any user from hostB except chm is allowed to access an account on
hostA with the same user
name. However, if
.rhosts in the home directory of user
chm on hostA contains:
hostB
then user chm from hostB can access account
chm on hostA.
6.
/etc/hosts.equiv
on hostA contains the line:
+@example_group
The network group example_group
consists of:
example_group ( , ,EXAMPLE_DOMAIN)
If hostA is not running Network Information Service (NIS), user
chm on any host can access
account
chm on hostA.
If
hostA is running Network Information Service (NIS), and
hostA is in the domain
EXAMPLE_DOMAIN
, user chm on any host, whether in EXAMPLE_DOMAIN
or not, can access
account
chm on hostA.
However, if
.rhosts in the home directory of user chm on hostA contains the line:
-@example_group
and hostA is either not running Network Information Service (NIS) or is in domain
EXAMPLE_DOMAIN, no user
chm on any host can access the account chm on hostA.IfhostA is
running Network Information Service (NIS) but is not in the domain
EXAMPLE_DOMAIN
, this line
has no effect.
7.
/etc/hosts.equiv
on hostA contains the line:
-@example_group
The network group example_group consists of:
example_group (hostB, ,)
All users on hostB are denied access to hostA.
However, if
.rhosts in the home directory of a user on hostA contains any of the following lines:
+@example_group chm
hostB chm
+ chm
then user chm on hostB can access that account on hostA.
WARNINGS
For security purposes, the files
/etc/hosts.equiv and .rhosts should exist and be readable and
writable only by the owner, even if they are empty.
Care must be exercised when creating the
/etc/hosts.equiv
The -l option to remshd and rlogind prevents any authentication based on .rhosts files for users
other than a superuser.
AUTHOR
hosts.equiv was developed by the University of California, Berkeley.
The
+, -name, +@netgroup_name, and -@netgroup_name, extensions were developed by Sun Microsys-
tems, Inc.
FILES
$HOME/.rhosts
/etc/hosts.equiv
SEE ALSO
rcp(1), rdist(1), remsh(1), rlogin(1), remshd(1M), rlogind(1M), gethostent(3N), rcmd(3N), netgroup(4).
HP-UX 11i Version 3: September 2010 − 3 − Hewlett-Packard Company 3