CVS does not prompt for password with rsh

[Grizzle, Kelly]

I have a cvs repository running under cygwin that I access remotely
with rsh.  When I attempt any operations remotely, I am not prompted
for a password.  I imagine that this is not desired since it opens my
repository to anyone that knows my user name/address.  For example:

$ export CVSROOT=:server:me@myserver:/usr/local/cvs
$ cvs co myproject
 .... cvs checks out the myproject module ...

Is this desired behavior, or am I missing something?  Should I disable
rsh, rlogin, etc... on my server and require access via ssh instead?

--Kelly

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/