REMOTE.ACCESS(5MDQS)    COMMAND REFERENCE    REMOTE.ACCESS(5MDQS)



NAME
     remote.access - control remote access to MDQS services.

DESCRIPTION
     The file remote.access determines which users on which
     remote hosts may access local MDQS services.  This file is
     read by the MDQS netrecv program when it receives a request
     from a remote user that does not have rsh privileges on the
     local host.  An example remote.access file follows:

          # allow access by the following users:
          #<remote host> <local user>   <remote user>
          host1          clarence
          host1          leon      root
          host2          doug      *
          *         allen

     Note that # is a comment character.  The first entry allows
     access by clarence from host1.  For security reasons
     allowing access by root is not often appropriate.  The
     second entry allows access by root from host1, but the local
     system treats the request as if it came from leon and so
     access is based on leon's rights, not those of root.  Note
     that if two users have the same alias, only one of those
     aliases will take effect.  In other words it is not possible
     for multiple users to have an entry with the same alias
     because when a request is received from that alias, there is
     no way of knowing whose access rights to use.  This issue is
     resolved by assigning rights based on the first entry it
     finds in the table.  The third entry allows access by any
     user from host2, but the local system treats the request as
     if it came from doug.  The fourth entry allows access by
     allen from any system.

     Remember that remote.access determines if the MDQS will
     accept a request from a remote user that does not already
     have rsh privileges.  When setting up remote.access keep in
     mind that the local users mentioned must already be in the
     password file (/etc/passwd).  They do not, however, have to
     have login privileges nor do they need a home directory.
     You can prevent them from logging on by setting their
     encrypted password to '*' or any other single letter
     (because no password encrypts to a single character).

FILES
     /usr/lib/mdqs/remote.access
                         MDQS remote access database file

SEE ALSO
     mdqsd(8mdqs) and qconf(5mdqs).





Printed 3/13/89                                                 1

%%index%%
na:552,107;
de:659,2877;
fi:3536,192;
se:3728,157;
%%index%%000000000084