A point most have been missing: what if the .rhosts file is shared via NFS among diggerent machines, on which you have different usernames? Silly situation, but it's happened before... /a