Re: Configure ssh to behave like rsh. How?

From: Geert Hendrickx (geert.hendrickx_at_ua.ac.be)
Date: 06/27/04

  • Next message: Tom Parquette: "Re: voodoo 2" 
    Date: Sun, 27 Jun 2004 00:13:20 +0200
To: Rob <stopspam@users.sourceforge.net>

    On Fri, Jun 25, 2004 at 03:45:24PM +0900, Rob wrote:
    >
    > Hi,
    >
    > I have a cluster of PCs, on which the 'slaves' used to only allow rsh
    > connections, to execute commands, but no logins.
    >
    > I have removed the r-commands, and want to use the ssh command family
    > instead. Although 'ssh slaveN command' works fine, this also allows login
    > to the slave PC, simply by typing 'ssh slaveN'.
    >
    > How can I configure sshd, so that it will allow remote command execution,
    > but will refuse logins?
    >
    > Thanks,
    > Rob.

    I'd say you could give the users no shell (if they shouldn't have shell
    access to the machine in any other way), by setting their default shell
    to /sbin/nologin. You can do that with the chsh(1) command.

    Then again, they may still be able to start a shell with
            'ssh <remote-machine> tcsh'
    so maybe you should chmod /bin/sh and /bin/tcsh to 550.

    GH
    _______________________________________________
    freebsd-questions@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-questions
    To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

  • Next message: Tom Parquette: "Re: voodoo 2"

    Relevant Pages

    • The point of point
      ... command, aka `source'. ... "Read and execute commands from the FILENAME argument in the current ... shell context.", accoring to the bash.info. ... the current shell environment and return the exit status of the last ...
      (comp.unix.shell)
    • Re: Enabling STARTTLS in Exchange 2003 IMAP service?
      ... For the first, if you simply want to enable encrypted logins, then once you ... I guess I don't understand the need to have that command listed. ... > This section describes a means for "upgrading" an ordinary cleartext IMAP ... In order to use it, however, the server must advertise support for ...
      (microsoft.public.exchange.admin)
    • Re: Enabling STARTTLS in Exchange 2003 IMAP service?
      ... For the first, if you simply want to enable encrypted logins, then once you ... I guess I don't understand the need to have that command listed. ... > This section describes a means for "upgrading" an ordinary cleartext IMAP ... In order to use it, however, the server must advertise support for ...
      (microsoft.public.exchange2000.protocols)
    • Re: Enabling STARTTLS in Exchange 2003 IMAP service?
      ... For the first, if you simply want to enable encrypted logins, then once you ... I guess I don't understand the need to have that command listed. ... > This section describes a means for "upgrading" an ordinary cleartext IMAP ... In order to use it, however, the server must advertise support for ...
      (microsoft.public.exchange2000.admin)
    • Configure ssh to behave like rsh. How?
      ... I have a cluster of PCs, on which the 'slaves' used to only allow rsh ... connections, to execute commands, but no logins. ... I have removed the r-commands, and want to use the ssh command family ...
      (freebsd-questions)