Re: rsh alternatives

From: Bill Verzal (Bill_Verzal@BCBSIL.COM)
Date: Tue Dec 17 2002 - 11:49:08 EST


SP = Kerberos.
--------------------------------------------------------------------------------------------------------

Bill Verzal
Technical Consultant
Forbes Technical Consulting
(312) 653-3684
bill_verzal@bcbsil.com
billverzal@imcingular.com (Pager)
888-428-4025 (Pager)
MailStop: 27.202B

                    "Shekhar Dhotre"
                    <Shekhar.Dhotre@LENDLEA To: aix-l@Princeton.EDU
                    SEREI.COM> cc:
                    Sent by: "IBM AIX Subject: rsh alternatives
                    Discussion List"
                    <aix-l@Princeton.EDU>

                    12/17/2002 10:29 AM
                    Please respond to "IBM
                    AIX Discussion List"

Hi All,

Our Oracle DBA `s are using rsh in there scripts to shutdown/startup
database on remote nodes from application node .
These are all RS/6000 SP nodes . running AIX4.3.3.10 .

Basically, the App. need is to be able to coordinate the timing of shutting
down/starting of apps and databases that reside on different nodes.
The current solution uses rsh to do this. This is a security exposure the
way it currently works. I'm wondering if this is something that can be
done effectively but without the root privileges ?

Apps. is not too keen on using the "clock" to coordinate scheduled
shut/starts because of timing issues and that it doesn't cover the one-off
type situations.

I have questions :

1) Can rsh be used in a way that doesn't create security exposures?
2) What viable alternatives are out there to accomplish this need?

Thoughts?

Thank You
SD

**********
The information contained in this communication is confidential, private, proprietary, or otherwise privileged and is intended only for the use of the addressee. Unauthorized use, disclosure, distribution or copying is strictly prohibited and may be unlawful. If you have received this communication in error, please notify the sender immediately at (312)653-6000 in Illinois; (972)766-6900 in Texas; or (800)835-8699 in New Mexico.
**********



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:16:25 EDT