topic Re: rlogin problem in Operating System - HP-UX

rlogin problem

Din_1 — Tue, 20 Nov 2007 00:34:39 GMT

Dear All,

We have 5 HP UX PA-RISC servers. Name of the servers as follows

DB1
DB2
APP1
APP2
DB Test

In which i can rlogin form DB1 & DB Test to remaining servers. But im not able
to rlogin from DB2 APP1 & APP2

Error message is

rlogin: This program requires super user privileges

Please help!!!

Note: Im login in as a local user and do rlogin in DB1 & DB Test in which i can get access to rlogin

Regards,
Din

Re: rlogin problem

Kapil Jha — Tue, 20 Nov 2007 00:59:17 GMT

Hi Din,
Have you checked .rhosts file of the user
through which u tryin to do rlogin.
you may also check /etc/hosts.allow.
Hope this would help.
Kapil

Re: rlogin problem

Sandy Chen — Tue, 20 Nov 2007 01:16:35 GMT

Hi,

Another addition, your /etc/hosts should contain the other 4 hosts if you wanted to do rlogin between them.

Regards,
Sandy

Re: rlogin problem

Din_1 — Tue, 20 Nov 2007 01:34:30 GMT

Hi Sandy & Kapil,

I have above mentioed entries in my /etc/hosts,and .rhosts file in users home directory. But still im getting the error. Thank you very much for your reply.

Regards,
Din

Re: rlogin problem

Steven Schweda — Tue, 20 Nov 2007 01:57:54 GMT

Check the ownership and permissions on the
rlogin program?

Around here:

dy # ls -l /usr/bin/rlogin
-r-sr-xr-x 1 root bin 40960 Sep 20 2006 /usr/bin/rlogin

If I remove the setuid bit, it fails as you
describe:

dy # cp /usr/bin/rlogin /usr/bin/rloginX
dy # chmod 555 /usr/bin/rloginX

Now, as a non-root user, with the normal
permissions:

dy $ /usr/bin/rlogin alp

I'm ALP. Who are you?

Username: [...]

But without the setuid bit:

dy $ /usr/bin/rloginX alp
rlogin: This program requires super user privileges

Not being owned by root could have a similar
effect.

Apparently, the message means what it says.

Re: rlogin problem

Kapil Jha — Tue, 20 Nov 2007 02:08:14 GMT

Thanks very interesting Stevan....
i never saw that....can you please explain a bit why it is happening like this......
when other have execute permission in your example
-r-sr-xr-x
BR,
Kapil

Re: rlogin problem

Kapil Jha — Tue, 20 Nov 2007 02:09:11 GMT

Thats very interesting Stevan....
i never saw that....can you please explain a bit why it is happening like this......
when other have execute permission in your example
-r-sr-xr-x
BR,
Kapil

Re: rlogin problem

Steven Schweda — Tue, 20 Nov 2007 02:25:44 GMT

> [...] can you please explain a bit why it
> is happening like this......

_Is_ the ownership or permissions of your
rlogin program wrong (on the systems where
you see the problem)? (I showed you mine,
...)

If so, is your question, "How did it/they get
to be wrong?"?

I can't know, I can only guess.

Possibly more important, if the attributes of
_this_ program are bad, how many other
programs are also damaged?

"man swverify", and look for
"check_permissions"?

Re: rlogin problem

whiteknight — Tue, 20 Nov 2007 02:36:37 GMT

Din,

check permission as well.
Here are two ways to address this issue:

1. Change the permissions of /home to drwxr-xr-x (755).

2. Change the ownership of /home to root:users.

With permissions set to 755, all users have read access to the directory,
so the connection succeeds. Similarly, with the ownership changed to
"group = users", again the connection succeeds because "users" is the
primary group of user1 and the permissions are set to allow "group"
access (i.e. 750).

WK

Re: rlogin problem

Din_1 — Tue, 20 Nov 2007 03:20:40 GMT

Thank you very much Mr.Steven Schweda. Its really worked and solved my problem. Now i can rlogin from any of the 5 server. Thank you once again for your support.

Thank you to the team whoever replied to my thread.

Regards,
Din