By default these daemons do not accept wildcards in hosts.equiv or .rhosts files. Both daemons have an '-l' option to disable user .rhosts files. The rexecd daemon disallows root logins, once my favourite backdoor. UNIX passwords are still permitted by default. The code has been tested with SunOS 4.x and 5.x.
Users first log into a password-less dummy account.
There is a very good chance everything now also works with Digital UNIX, but I was unable to test this myself.