Software Configuration for Windows NT/2000

Configuration:

For configuration of the trusted user database the program 'configure' has to be called.

configure.exe -{add [-p], list, remove}

configure.exe -add remote_user local_user ip_list [-p password]

· adds a new user (being logged onto the remote machine as 'remote_user') to the trusted user database. This user will be impersonated as 'local_user' by passing 'password' to the WIN32 API. In addition, the remote IP address must match one in the 'ip_list'. Unless the -p option is specified, you will be prompted for a password. Within the NT environment, no password is required (Delegation). configure.exe also allows you to specify to log on to domains.
 example:

c:\> configure -add getin \\MORDOR\getin 121.22.3.*
 where the incoming getin (from a UNIX or NT system) will be logged into the domain MORDOR, running in the 'getin' context.

 An IP list may look like: (a * has to be the last entry when used)
            123.456.78.9
            123.456.78.*
            123.456.7.8.9,123.456.7.8.0,123.456.*

configure.exe -list

· lists the trusted user database

configure.exe -remove remote_user

· removes 'remove_user' from the trusted user database
 

For security reasons, a user has to have administrator privileges to install, stop and remove the service. The same privileges have to be held for configuration.

Manual Control of the Service:
During Installation you were required to point to a location where the software will be stored. This procedure has been monitored and keys were inserted into the registry.
Users running Windows NT can check on the service by going to START -> Control Panel -> Services. The service appears as BsdRshd.

To allow the startup of processes, you have to use the configure executable, which will be stored in installation directory (see configuration). This tool will configure a trustbase consisting of a set of usernames and IP addresses.
Incoming requests will be matched with the trustbase and access will be granted if a match has been found.