.k5login and only allow rcp
Sam Hartman
hartmans at MIT.EDU
Sun Jun 16 18:26:19 EDT 2002
>>>>> "eichin-krb" == eichin-krb <eichin-krb at thok.org> writes:
>> Yes. Write a shell that only allows the user to run rcp.
eichin-krb> Or use kerberized ssh, and the command= option in the
eichin-krb> authorized keys file (see the sshd manpage.) There
eichin-krb> are other things you need to do along with it (read
eichin-krb> the man page in detail), and it may not be enough [you
eichin-krb> may have to have a constant argument string, though
eichin-krb> that may not be a bad thing - the example in the man
eichin-krb> page uses "dump" with fixed arguments] but it is a
eichin-krb> possible shortcut.
Mark, I don't think you can easily get rcp to call anything other than
Kerberized rsh.
Although if you have ssh you have scp.
More information about the Kerberos
mailing list