topic Re: Identifying scripts using remsh in Operating System - HP-UX

Identifying scripts using remsh

Berd — Mon, 11 Dec 2006 06:54:08 GMT

I am starting upon a process to replace remsh with ssh. I have gone through a process of provate and public key generation, and have copied these across to hosts as necessary.

I'm now trying to locate all scripts that make use of remsh so I can edit them. Has anyone found a clever of way of locating all scripts.

I am worried that I will shutdown 'r' services but then find I have missed a script.

Berd

Re: Identifying scripts using remsh

Pete Randall — Mon, 11 Dec 2006 07:06:23 GMT

You can use the find command:

find /starting_directory -type f -exec grep -l "remsh" {} \;

Pete

Re: Identifying scripts using remsh

James R. Ferguson — Mon, 11 Dec 2006 07:07:59 GMT

Hi Berd:

I'd use 'find' and 'grep' for "remsh".

Keep your 'find' from crossing mountpoints with '-xdev'. This is very useful if you search the root ('/') directory. Afterall, you *want* to search '/sbin' and '/etc/' but don't want nor need to traverse '/var' or '/tmp'.

The following shell script limits examination to text files eliminating searching binary ones:

# cat .finder
#!/usr/bin/sh
typeset DIR=$1
typeset PAT=$2
find ${DIR} -xdev -type f | while read FILE
do
[ `file ${FILE} | grep -c ascii` -eq 0 ] && continue
grep "$PAT" ${FILE} /dev/null
done
exit 0

...run as:

# ./finder /path_to_search pattern_to_find

for example:

# ./finder / remsh

Regards!

...JRF...

Re: Identifying scripts using remsh

Yogeeraj_1 — Mon, 11 Dec 2006 07:08:22 GMT

hi,

One good way would be to go to each directory where you keep your scripts and do a:

grep -i remsh *.sh

otherwise, you can just go to all the other hosts and run:

last | grep rmeshd

though this does not give you the name of the script, you will know that there are still scripts that have been left out!

hope this helps!

kind regards
yogeeraj

Re: Identifying scripts using remsh

Peter Godron — Mon, 11 Dec 2006 07:09:23 GMT

Berd,
check the wtmp log file (last | grep remshd) then concentrate on those users and times of access.
Or you could try to get the daemon to log access. Look at /etc/inetd.conf.

Re: Identifying scripts using remsh

Berd — Mon, 11 Dec 2006 07:25:15 GMT

Thanks for the input everyone.

I think I will use the find command with the xdev flag. I'll work on one mount point at a time per host.

Cheers,
Berd