Remote Access Permission

Introduction

FNWI computersystems can normally only be accessed locally, i.e. when logging in on the console or via a local network login.

Remote access through rlogin, telnet or rsh, generally yields one of the error messages

  You are not authorized for this login
  You are not authorized for network login

As most users only login from local systems and networks this restriction enhances system security: if less users can login from the outside world, less hacker breakins are likely to succeed.

If you do need access to FNWI systems remotely -e.g., if you're traveling abroad, or for access through your internet provider- send a message to the ICT service desk support mail address in order to have remote access enabled.

.rhosts files

.rhosts files are used to rlogin or rsh to a system without entering your password. The .rhosts file contents is only active for hosts within the FNWI networks. Rlogin and Rsh is not available for connections outside the FNWI networks since these protocols transmit your username and password in plain text over the internet.

For staff members: if you login from one of the student systems to a system in a research network, you also always have to provide a password. Therefore a rcp from an student system to a staff system will not work. Rcp's vice versa will work, however.

Secure Shells

Evidently, all remote computer access while on the internet is dangerous. Somewhere, someone may be tapping the network and log your password, which is sent across in plaintext in most cases.

Whenever possible, use the SSH system. SSH, secure shell, is a remote login tool much like rsh, adding encryption to all data sent back and forth between client and server.

All FNWI fileservers run the SSH daemon.

Note that, although SSH gives you a secure connection, you will still need remote access permission.