Subject: Re: kerberos V
To: Tom Ivar Helbekkmo <tih@kpnQwest.no>
From: Luke Mewburn <lukem@wasabisystems.com>
List: current-users
Date: 05/31/2001 10:39:42
On Wed, May 30, 2001 at 08:32:31PM +0200, Tom Ivar Helbekkmo wrote:
> Patrick Welche <prlw1@newn.cam.ac.uk> writes:
> 
> > There's one bit of rsh I'm left with needing: if I RCMD_CMD=ssh and
> > try to rdist, rdist will hang...
> 
> Are you sure the problem is what you think it is?  If you're properly
> authenticated for the (kerberized) ssh connection, rdist will work
> (and this includes running it from cron, as long as you've got a
> ticket file prepared for it -- I know, I've done it).  If, however,
> your authentication is not in order, you'll get a large number of
> processes started in a very short time: rdist calls rcmd, which spawns
> ssh, which tries to do its thing, but fails, so falls back on rsh,
> which calls rcmd, which spawns ssh...  Oops.  :-)
> 
> If rsh were removed, and ssh took its place, this loop wouldn't happen.

As would adding the following to your ~/.ssh/config (or global config):
	Host *
		FallBackToRsh no


Luke.