rsh setup help

[cdlaforc]

Hello,
Can someone please list the proper steps in getting rsh setup? I have been searching around a little bit and have the service started as well as I changed a line in the rsh file in the /etc/xinetd.d directory to disabled = no. I 'm confused as to what to do at this point. Also, are the step for getting rsh setup the same at rlogin and rcp? One more question which is more secure rsh or ssh, and I guess what do most people use?
Thanks for any help,

Chris.

[kg4cbk]

You should use ssh instead.

Historically rsh is normally disabled in systems for securty reasons.

ssh, scp are the better choice.

What are you trying to accomplish? There may be some other alternatives.

[cdlaforc]

kg4cbk,
I would like to, from work, be able to tinker with my home pc(set up oracle client, configure Oracle Pro C, do some shell scripting, and other stuff like that). The ssh command works if I try to connect to my localhost will I have to do anything to get this to work from other ip's.
Thanks for the reply,

Chris.

[kg4cbk]

Here are the basics for ssh.

1. disable root login in the /etc/ssh/sshd_config file.
2. Limit the users that can login vi ssh by making changes in the /etc/ssh/sshd_config file.
3. open the ssh port in iptables
4. if you are using a hardware router in front of your home LAN (recommended) forward the ssh port to the machne you want to connect to from elsewhere.
5. use strong password! Or use a public/private key setup instead of passwords.
6. If you don't like seeing all the script kiddies attempting to log into your system via ssh move the port sshd is on by modifying the /etc/ssh/sshd_config file. (note this is not a security measure just a way to reduce the log traffic)
7. If you want a full desktop display use VNC but tunnel it over ssh. ssh -L 5911:IPADDRESS:5901 IPADDRESS then startup vnc using the command: vncviewer localhost:11 this will connect over the ssh encrypting all your traffic. Remember vnc does not encrpyt your passwords or anything else on its own.
8. If you just want to rediirect the displays of certain GUI applications back to your local machine enable X11 forwarding. You may need to use the command ssh -Y or ssh -X to get X11 forwarding working. After you make the connection run a command like xclock or xlogo or system-config-services and the GUI display will be sent to your local machine.

Hope this helps.