From owner-freebsd-security Wed Mar 27 16:45:34 2002 Delivered-To: freebsd-security@freebsd.org Received: from rwcrmhc53.attbi.com (rwcrmhc53.attbi.com [204.127.198.39]) by hub.freebsd.org (Postfix) with ESMTP id 7B48E37B417 for ; Wed, 27 Mar 2002 16:45:30 -0800 (PST) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc53.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020328004530.VPLE2951.rwcrmhc53.attbi.com@blossom.cjclark.org>; Thu, 28 Mar 2002 00:45:30 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g2S0jPq95249; Wed, 27 Mar 2002 16:45:25 -0800 (PST) (envelope-from cjc) Date: Wed, 27 Mar 2002 16:45:25 -0800 From: "Crist J. Clark" To: Fernan Aguero Cc: FreeBSD Security Subject: Re: using ssh to run remote commands? Message-ID: <20020327164525.V89885@blossom.cjclark.org> References: <20020327152947.B443@iib.unsam.edu.ar> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20020327152947.B443@iib.unsam.edu.ar>; from fernan@iib.unsam.edu.ar on Wed, Mar 27, 2002 at 03:29:47PM -0300 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Mar 27, 2002 at 03:29:47PM -0300, Fernan Aguero wrote: > I'd like to know how to run remote commands using ssh. > I know I can do it as myself, but I'd like to know how can I set up my > systems to allow non-login users (root, operator, amanda) to run > remote commands on other hosts. > > Specifically, I want to now how can i run restore on the backup server > (the one holding the tape drive) to recover full filesystems to a > remote host. > Obviously this should be done as either root or some other privileged > user. > > All examples point to rsh, and I'd like to know if this can be done > securely using ssh. rsh(1) and ssh(1) have the same syntax. All of the rsh(1) command lines in your examples will work. The only difference is how the authentication works. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message