I ran over something last week while playing around with our Suns (4.1.3), and thought I'd pass it on to you while it makes its way through Sun. ruserok() denies access if /etc/hosts.equiv contains a line with only a '+'. This seems like a Good Thing to me, even though it's not expected behaviour, but it makes me wonder about rlogin, rcp, and rsh, since they still seem to work correctly (i.e., they let anyone who wants to walk all over your machine). Walker