Installing and Administering Internet Services

58 Chapter 2
Installing and Configuring Internet Services
Configuring Files to Bypass Security
machine broccoli login bill password try2Bhave
If user andrea has this entry in her .netrc file on host cabbage, she
can use ftp or rexec to connect to user bill’s account on host
broccoli without being prompted for a password.
Each $HOME/.netrc file should be owned by the user of the home
directory, with permissions set to 0600 (-rw-------). The user’s home
directory should be write-protected so that no other user can create a
.netrc file in it.
The fields in a .netrc entry may be separated by white space, line
breaks, or commas. If you want to include a comma in a field, enclose the
whole field in double quotes. For example, if you need to supply both
account and user passwords for a login to an MPE /iX machine, enter
both passwords in the password field, separated by a comma, and enclose
the field in double quotes. Following is an example of a .netrc entry for
an MPE /iX login with both account and user passwords:
machine corn login manager.sys password "usrpass,acctpass"
CAUTION The $HOME/.netrc file creates a significant security risk. It contains
unencrypted passwords.
For more information, type man 4 netrc at the HP-UX prompt.