Remote commands on OSX
JF Mezei
rsh command to be issued on a remote VMS host which then opens a
terminal window on my Mac. The VMS host has proxies to allow this to
happen from that particular macintosh/gid/guid combo.
What would be the best way to get that same functionality so that I,
from node BIKE, could remotely cause node VELO to pop an XTERM onto my
node BIKE's display ?
This is only intra-lan, so encryption or extreme security is not an
absolute requirement.
There is an LDAP/KERBEROS server on the lan.
So basically, I am interested in the command that BIKE needs to issue
(RSH, SSH, whatever) as well as the steps/utilities needed to make such
command be executed without need to enter username/password combos.
I other words, if I wish to enable RSH on node VELO, I assume there is a
service enable command that is needed, but where would I setuyp proxies
that would authorise its use ?
( VELO is an XSERVE )
VAXman-
JF,
As you know, I'm a big fan of ssh port forwarding. I'd use it as it will
properly handle the X11 forwarding and you don't/won't need to worry about
setting up access to each X11 server for the remote client.
This should work:
% ssh -X username@remote-hostname-or-IP /usr/X11/bin/xterm
You need to have your X11 server started on the local machine where you
issue this command.
If you setup hostkey authentication, you won't even need to enter the
username's password. With hostkey, you can add & and free your initial
terminal session.
--
VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)ORG
http://www.quirkfactory.com/popart/asskey/eqn2.png
"Well my son, life is like a beanstalk, isn't it?"
Paul Sture
VAXman- @SendSpamHere.ORG wrote:
> JF,
>
> As you know, I'm a big fan of ssh port forwarding. I'd use it as it will
> properly handle the X11 forwarding and you don't/won't need to worry about
> setting up access to each X11 server for the remote client.
>
> This should work:
>
> % ssh -X username@remote-hostname-or-IP /usr/X11/bin/xterm
>
> You need to have your X11 server started on the local machine where you
> issue this command.
I believe that from Leopard, X11 will start itself on demand. I've just
issued the above command on 10.5.8 and sure enough, X11 came up by
itself.
> If you setup hostkey authentication, you won't even need to enter the
> username's password. With hostkey, you can add & and free your initial
> terminal session.
I've thought about that, but do I really want a non-admin account to
have "password free" access to an admin account?
--
Paul Sture
VAXman-
Granted, there are many issues with ssh hostkey authentication. I, for
one, would maintain a local ssh config for the admin prohibiting use of
the hostkey.
JF, however, is using this on his inside network. I think JF can trust
himself; we just can't trust him! :P