[3243] in SIPB-AFS-requests
Re: migrating rosebud to a Sun
daemon@ATHENA.MIT.EDU (Mike Whitson)
Tue Jan 19 16:25:34 1999
To: mhpower@MIT.EDU
Cc: sipb-afsreq@MIT.EDU, zacheiss@MIT.EDU
From: Mike Whitson <mwhitson@MIT.EDU>
Date: 19 Jan 1999 16:25:27 -0500
In-Reply-To: mhpower@MIT.EDU's message of Tue, 19 Jan 1999 14:00:20 -0500
mhpower@MIT.EDU writes:
> -- the existing Sun afs servers allow telnet logins with
> "telnet -a user". This has been my preferred method of logging
> into an afs server. I think it should continue to work, unless
> we later decide to allow only ssh.
This is fine with me, but if we're going to enable kerberized telnet,
I'd like to also use the -e flag to telnetd, which refuses unencrypted
connections.
> -- to allow only root to login, I believe it is safest to
> create an empty /etc/athena/access file
> -- since you are not running any services from the Sun inetd, it
> would seem consistent with the idea of not running any unnecessary
> network daemons to not run /usr/sbin/inetd
> -- since I'm modifying /etc/init.d/inetsvc anyway to shut off
> the Sun inetd, I decided to also remove the superfluous sleep
> statement
These changes all look fine to me.
-mike
