• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Running remote commands through sudo/sec framework?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Running remote commands through sudo/sec framework?


  • Subject: Re: Running remote commands through sudo/sec framework?
  • From: Rakka <email@hidden>
  • Date: Sat, 30 Jul 2005 09:05:20 +1000


On 30/07/2005, at 9:00 AM, Rakka wrote:


On Jul 29, 2005, at 10:15 PM, Rakka wrote:



Thanks. I'll look into this as well.

I thought of a possible alternate way:

SSH is activated on the remote machine first. Then the user runs an installer on the remote system that installs a setuid tool that contains the required commands.

From the admin machine, I connect to the remote machine, then run the tool.

Would that work?



No that won't work because the security server on the remote machine from which the remote setuid tool would then try to obtain authorization does not know anything about your local authorization reference.


I mean if I bypass the auth ref step totally?

1. Admin uses app to connect to remote ssh system
2. Verify that ssh user is admin (still don't know how to do this)
3. Execute setuid tool.

Or a similar way.

Also, would I use NSTask to SSH to a server, or something else, if this is through a cocoa app?

Thanks.



___________________________________________________________To help you stay safe and secure online, we've developed the all new Yahoo! Security Centre. http://uk.security.yahoo.com




Attachment: smime.p7s
Description: S/MIME cryptographic signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

References: 
 >Running remote commands through sudo/sec framework? (From: Rakka <email@hidden>)
 >Re: Running remote commands through sudo/sec framework? (From: Michael Carter <email@hidden>)
 >Re: Running remote commands through sudo/sec framework? (From: Rakka <email@hidden>)
 >Re: Running remote commands through sudo/sec framework? (From: Rakka <email@hidden>)
 >Re: Running remote commands through sudo/sec framework? (From: Rakka <email@hidden>)

  • Prev by Date: Re: Running remote commands through sudo/sec framework?
  • Next by Date: Re: NSTreeController ChildKeyPath
  • Previous by thread: Re: Running remote commands through sudo/sec framework?
  • Next by thread: What is _xxx_EOARchive_English.java for?
  • Index(es):
    • Date
    • Thread