topic Re: rlogin in Operating System - HP-UX

rlogin

Emilio Brusa — Thu, 12 Feb 2004 13:19:43 GMT

Hi
some one can tell me how can i disabled the rlogin services in mi hpux.

thakx

Re: rlogin

Steven E. Protter — Thu, 12 Feb 2004 13:23:10 GMT

vi /etc/inetd.conf

comment out any protocol that starts with an r

rm .rhosts files on the machine

set up /etc/hosts.equiv to prevent logins from all machines, deny all

vi /var/adm/inetd.sec and deny all rlogin protocols

inetd -c

To reload the Internet Services Daemon.

SEP

Re: rlogin

Uday_S_Ankolekar — Thu, 12 Feb 2004 13:27:52 GMT

comment out rlogin from /etc/inetd.conf
and restart inetd daemon by inetd -c.

Also remove .rhosts and hosts.equiv from users home and /etc directory.

Insted of "r" commands use ssh it's more secured and encrypted.

ssh can be used for scp, sftp etc.

ssh is available here for free:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

-USA..

Re: rlogin

Emilio Brusa — Thu, 12 Feb 2004 13:42:15 GMT

in inetd.conf is the line
login stream tcp nowait root /usr/lbin/rlogind rlogind

isn it ?

thanks

Re: rlogin

Ed Sampson — Thu, 12 Feb 2004 14:23:10 GMT

You should also disable the remshd and rexecd commands. The full line looks something like this in the default inetd.conf file:
shell stream tcp nowait root /usr/lbin/remshd remshd
exec stream tcp nowait root /usr/lbin/rexecd rexecd

I would suggest that before you turn these off on a production system that you try to identify who is using them, or at least let people know that you are going to do it.

You can turn on logging on the inetd daemon with the -l option. It doesn't show who is using them, but it does show from what systems or workstations. The entries show up in syslog.
good luck.

Re: rlogin

Emilio Brusa — Fri, 13 Feb 2004 13:14:21 GMT

Ed.

For what reasons I disable shell and exec.
Sorry but idont know they used.

E.

Re: rlogin

Sridhar Bhaskarla — Fri, 13 Feb 2004 13:29:53 GMT

Hi,

R-commands include rlogin, remsh and rexec.

rlogind (login service) services rlogin connections.
remshd (shell service) services remsh connections.
rexecd (exec service) services rexec connections.

So, if you want to turn off all these services, you will need to turn off shell and exec also along with login.

If you are only interested in "rlogin", then 'login' alone is sufficient.

-Sri