by mail.netbsd.org with SMTP; 18 Oct 2000 13:48:34 -0000
	by point.osg.gov.bc.ca (8.8.7/8.8.8) id GAA23547;
	Wed, 18 Oct 2000 06:46:52 -0700
 via SMTP by point.osg.gov.bc.ca, id smtpda23545; Wed Oct 18 06:46:40 2000
	by passer.osg.gov.bc.ca (8.11.0/8.9.1) id e9IDkeS47102;
	Wed, 18 Oct 2000 06:46:40 -0700 (PDT)
 via SMTP by passer9.cwsent.com, id smtpdI47099; Wed Oct 18 06:46:07 2000
	by cwsys.cwsent.com (8.11.1/8.9.1) id e9IDk4g73988;
	Wed, 18 Oct 2000 06:46:05 -0700 (PDT)
Message-Id: <200010181346.e9IDk4g73988@cwsys.cwsent.com>
 via SMTP by localhost.cwsent.com, id smtpde73982; Wed Oct 18 06:45:17 2000
Reply-to: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
To: Andrew Brown <atatat@atatdot.net>
cc: Atsushi Onoe <onoe@sm.sony.co.jp>, sommerfeld@orchard.arlington.ma.us,
        cjs@cynic.net, hubert.feyrer@informatik.fh-regensburg.de,
        tech-security@netbsd.org
Subject: Re: setuid ssh 
In-reply-to: Your message of "Wed, 18 Oct 2000 09:35:51 EDT."
             <20001018093550.A29522@noc.untraceable.net> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 18 Oct 2000 06:45:17 -0700

In message <20001018093550.A29522@noc.untraceable.net>, Andrew Brown 
writes:
> >> .rhosts and .rhosts/rsa must die.
> >
> >I think .rhosts/rsa configuration may still be suitable for some
> >enviroment; e.g. remote backup from cron.  Perhaps you want to set
> >IgnoreUserKnownHosts.
> 
> rhosts/rsa with a passphrased key seems *better* to me than plain rsa
> alone.  or am i completly misunderstanding it?

That's how I understand it.


Regards,                       Phone:  (250)387-8437
Cy Schubert                      Fax:  (250)387-5766
Team Leader, Sun/DEC Team   Internet:  Cy.Schubert@osg.gov.bc.ca
Open Systems Group, ITSD, ISTA
Province of BC