|
|
Although REXEC is independent of other network applications, it uses components of the Network Application Architecture (NAA), specifically ID mapping and the Service Access Facility (SAF) on the server side, the connection server on the client side, and the Identification and Authentication Facility (IAF) scheme on both the server and client. The client also uses name-to-address mapping.
This section describes the components of the NAA that need to be administered before you set up REXEC. An overview of the steps that are specifically part of REXEC administration is then given.
Prior to setting up REXEC on the server, you must:
Using the ID mapping facility, map the logins of users on a client to logins on the server. Before client logins can be mapped, the server logins to which client logins will be mapped must exist on the server system with valid entries in the server's /etc/passwd file. When this is done, use the ID mapping administrative commands with a cr1 mapping scheme specification to complete the set up of the facility.
Setting up the connection server on the server includes the installation of the reportscheme service for each port monitor being used to offer the REXEC service.
Before you use REXEC from a client, you must do the following:
Setting up the authentication scheme on the client includes the use of the cr1 administration command cryptkey to specify the key to be shared between the server and the client.
Setting up the connection server on the client will include the specification of the authentication scheme to be used. For example, cr1 needs to be specified in /etc/iaf/serve.allow. This will help ensure enforcement of bilateral authentication.
Instructions for setting up and administering name-to-address mapping, the cr1 Bilateral Authentication Scheme, ID mapping, and the connection server appear in ``Administering name-to-address mapping'', ``cr1 Bilateral Authentication Scheme'', ``Administering ID mapping'', and ``Administering the connection server'' respectively, and should be consulted for more details.
Once you've set up the network services on which REXEC depends, you're ready to set up REXEC itself. Administering the REXEC facility on a server involves the following tasks: