Run server command remotely without gaining access

Run server command remotely without gaining access

am 23.01.2008 00:50:16 von Shell Solution

Dear All,
I have a secured set of servers.
I want to enable an outsider run a command without getting access to
this server.
Is that possible.

Regards,

Re: Run server command remotely without gaining access

am 23.01.2008 06:02:35 von Icarus Sparry

On Tue, 22 Jan 2008 15:50:16 -0800, Shell Solution wrote:

> Dear All,
> I have a secured set of servers.
> I want to enable an outsider run a command without getting access to
> this server.
> Is that possible.
>
> Regards,

Please define your terms! What do you mean by "access". Most security
people would say that a person who was able to get something run on a
machine on request had at least linited access to the machine.

What kind of interface do you want to provide to the "outsider"?

There are lots of examples of how to set up a web server so you can give
the output of a command if you want the interface to be a web one.

What kind of inputs will the outsider be giving? For instance if your
servers are a build farm and the input is a set of source files and
Makefiles, then many people could turn this into a shell environment.

At the moment your question is so vague the answer has to be one of
"Yes", "Maybe" or "No". Tell us more about what you actually wanr to do,
and we might be able to help more.

Re: Run server command remotely without gaining access

am 23.01.2008 14:02:02 von Maxwell Lol

Icarus Sparry writes:

> Please define your terms! What do you mean by "access".

Exactly. For instance, you can grant him access by having him send a
carrier pigeon with a written command, and when you receive it, you
type it in manually.

Re: Run server command remotely without gaining access

am 23.01.2008 16:18:20 von hyperboogie

On Jan 23, 1:50 am, Shell Solution wrote:
> Dear All,
> I have a secured set of servers.
> I want to enable an outsider run a command without getting access to
> this server.
> Is that possible.
>
> Regards,

There's a round about way of doing this using the ksh/bash /dev/tcp
device:
you can create a shell "pseudo"-server listening on this port and a
shell client

exec 3<>/dev/tcp/x.x.x.x/port

see documentation
also : http://www.bolthole.com/solaris/ksh-oddthings.html