Managing remote hosts Introduction 11.. IInnttrroodduuccttiioonn _L_i_n_u_x_c_o_n_f GUI is implemented as two processes: Linuxconf talks using a pipe to a program called remadmin. _r_e_m_a_d_m_i_n is a general purpose user interface front end (part of the linuxconf project, but may be use for something else). Normally, this is linuxconf who establish contact. It is calling remadmin. But the reverse is possible: remadmin may contact linuxconf using various means. One nice way is through an _s_s_h link. 22.. MMaannaaggiinngg rreemmoottee hhoossttss (This function is only available while running linuxconf in graphical mode). Currently, it is fairly limited. It ask for the name (and domain if needed) of a host and connects to it using the GUI frontend. This will evolve to something nicer where one will be able to define a list of commonly accessed host. Also various encapsulating protocols will be available. Ideas for the future include · Browser to locate other linux host on the net · Direct access to one specific feature of linuxconf (the main menu is not shown) · Other support protocols. Comments are welcome. 33.. SSppeecciiaall aaccccoouunnttss ffoorr rreemmoottee aaddmmiinniissttrraattiioonn aanndd cclluusstteerr mmaannaaggeemmeenntt Linuxconf use special protocols to perform remote administration and cluster management. Those protocols may be encapsulated easily to enhance either conectivity and security. One nice encapsulating tool is ssh (secure shell). ssh is a great replacement for commands like rlogin, rsh, rcp and telnet. It does basically the same thing (and more), but add strong encryption and compression. ssh is also very useful just to interconnect two process remotly, by providing a secure (encrypted) link. This is the way linuxconf is using it. By setting special account on workstations and servers, you will be able to use that with linuxconf without even knowing. This is experimental and comments are welcome. 33..11.. HHooww ttoo sseettuupp aa hhoosstt ffoorr rreemmoottee aaddmmiinniissttrraattiioonn Linuxconf uses ssh to establish the link. It expect that a special user account "remadmin" do exist on the remote host. This user account must have the shell /usr/lib/linuxconf/lib/remadminshell The account must NOT have a password. The idea is to trigger linuxconf immediatly, which will request a password using its GUI protocol. You can use ssh access control to limit who may access you box this way. They need the root password nevertheless to access it.