Managing remote hosts 11.. IInnttrroodduuccttiioonn The _L_i_n_u_x_c_o_n_f GUI is implemented as two processes: Linuxconf uses a pipe to talk to a program called remadmin. _r_e_m_a_d_m_i_n is a general purpose user interface front-end (part of the Linuxconf project, but may be used for something else). Normally, Linuxconf establishes contact by calling remadmin. But the reverse is possible: remadmin may contact Linuxconf using various means. One nice way is through a _s_s_h link. 22.. MMaannaaggiinngg rreemmoottee hhoossttss (This function is only available while running Linuxconf in graphical mode). Currently, it is fairly limited. It asks for the name (and domain if needed) of a host and connects to it using the GUI front-end. This will evolve into something better where one will be able to define a list of commonly accessed hosts. Also, various encapsulating protocols will be available. Ideas for the future include +o Browser to locate other Linux hosts on the net +o Direct access to one specific feature of Linuxconf (the main menu is not shown) +o Other support protocols Comments are welcome. 33.. SSppeecciiaall aaccccoouunnttss ffoorr rreemmoottee aaddmmiinniissttrraattiioonn aanndd cclluusstteerr mmaannaaggeemmeenntt Linuxconf uses special protocols to perform remote administration and cluster management. Those protocols may be encapsulated easily to enhance either connectivity and security. One encapsulating tool is ssh (secure shell). ssh is a great replacement for commands like rlogin, rsh, rcp and telnet. It does basically the same thing (and more), but with added encryption and compression. ssh is also very useful just to interconnect two processes remotely, by providing a secure (encrypted) link. This is the way Linuxconf is using it. By setting special accounts on workstations and servers, you will be able to use them with Linuxconf without even knowing it. This is experimental and comments are welcome. 33..11.. HHooww ttoo sseett uupp aa hhoosstt ffoorr rreemmoottee aaddmmiinniissttrraattiioonn Linuxconf uses ssh to establish the link. This user account must have the shell /usr/lib/linuxconf/lib/remadminshell The account must NOT have a password. The idea is to trigger Linuxconf immediately, which will request a password using its GUI protocol. You can use ssh access control to limit who may access your box this way. They need the root password, no matter what, to access it.