A remote login between two Trusted Solaris hosts is considered to be an extension of the current login session. An authorization is not required when:
The user chooses the Remote Login option on the CDE login screen.
The rlogin command does not prompt for a password.
If an /etc/hosts.equiv or a .rhosts file in the user's home directory on the remote host lists either the username or the host from which the remote login is being attempted, no password is required. See the rhosts(4) and rlogin(1) man pages for more information.
For all other remote logins, including logins with the telnet(1) command, the Remote Login authorization is required.
See "To Create a Rights Profile" for how to create and see "To Assign an Authorization to a User" for how to assign a new profile to a user.