topic Re: rlogin in Operating System - HP-UX

rlogin

abcd7 — Mon, 02 Jun 2008 20:03:24 GMT

Hi,

I have 2 HP IA systems. I could do rlogin b/w them as root.

Howerver, when I try to do rlogin from one user of system A to another user of system B, it is asking for password.

Those user ID's do not exists on the other systems.

My .rhosts entry reads like this

On Sys A

On Sys B

Thanks in Advance

Doug

Re: rlogin

Tim Nelson — Mon, 02 Jun 2008 20:08:53 GMT

users must exist on both systems.

If not then just about anyone could log in and what would be the need of having any form of security.

BTW, trusting system to system authentication is anti-security.

Re: rlogin

abcd7 — Mon, 02 Jun 2008 21:02:40 GMT

Hi,

As per the man page, .rhosts should work, even if the user doesn't exist locally. I want to try this out. Doesn't it work, at all?

Regards

Doug

Re: rlogin

Steven Schweda — Mon, 02 Jun 2008 21:43:52 GMT

This would all be clearer if you stopped
trying to hide all the useful details. To
a (this) casual reader, the difference, if
any, between "" and "user name>" is not immediately obvious. Nor
is it clear (to me) what "My" or "local"
means in this situation.

Which user accounts exist where?

What, exactly, is in each user's ".rhosts"
file?

Ownership and permissions on those ".rhosts"
files and the home directories ("ls -l"
output)?

Re: rlogin

Rasheed Tamton — Tue, 03 Jun 2008 06:42:42 GMT

Hi,

It should work with different user if you put the hostname and the username correctly in the destination .rhosts file.

But as mentioned above, the main culprit might be the permission of the .rhosts file or the dir of the user. If you are testing and you do the test as root most probably the owner of those is still root.

Just change the permissions and it should work.

Regards,
Rasheed Tamton

Re: rlogin

Jeeshan — Tue, 03 Jun 2008 06:53:16 GMT

you must have to have .rhosts file in all users home dorectory along with its user name.

Re: rlogin

SUDHAKAR_18 — Tue, 03 Jun 2008 09:10:31 GMT

http://forums12.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1212487593404+28353475&threadId=1210256

http://forums12.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1212487796091+28353475&threadId=356231

Hope This Helps.

Re: rlogin

abcd7 — Tue, 03 Jun 2008 15:00:55 GMT

Hi,

I do have the required entries..

Let me explain it in detail.

Sys A : users A & C

Sys B : users B & C

User A doesn't exist on Sys B

User B doesn't exist on Sys A

when I enable rlogin for user C, it works without asking for a password.

when I enable b/w users A & B, it asks for a password. Moreover it doesnt accept the password. I have to key in the username & the password..

Thanks

Doug

Re: rlogin

Steven Schweda — Tue, 03 Jun 2008 19:34:10 GMT

> Let me explain it in detail.

Who's stopping you? When can we expect this
detailed explanation to begin?

> when I enable b/w users A & B, it asks for
> a password.

How, exactly, do you "enable b/w users
A & B"? ("b/w"? Black and white?)

What, exactly, are you doing when "it asks
for a password"?

See earlier questions for requests for more
missing details.

Re: rlogin

abcd7 — Tue, 03 Jun 2008 20:37:18 GMT

Sorry about the confusion.

B/W : Between

Added entries in the .rhosts file.

SYS A : ~A/.rhosts

+ B

SYS B : ~B/.rhosts

+ A

I tried replacing "+" with the FQDN / short names / host names that I see when I telnet from A to B under 'who -um'. No use.

It works without a password when I try using user C.

SYS A : ~C/.rhosts

+ C

SYS B : ~C/.rhosts

+ C

Was succesfull even if I use FQDN or shortnames of the hosts in place of "+" for user C

When it asks for a password, I enter the password. Not accpeted. Goes for login retry. Gives me a nornal login prompt, like telnet / ssh. Accepts username & password, like any other system & login method.

Re: rlogin

Patrick Wallek — Tue, 03 Jun 2008 20:52:18 GMT

When doing a remsh are you using the syntax 'remsh host -l '?

In your case if from SYSA

# remsh sysb -l b

Re: rlogin

abcd7 — Tue, 03 Jun 2008 20:55:56 GMT

It says "remshd: Login incorrect."

Re: rlogin

Dennis Handly — Tue, 03 Jun 2008 20:56:39 GMT

>when I try to do rlogin from one user of system A to another user of system B, it is asking for password.

I had no problem. I assume you are using from A in SYSA:
rlogin SYSB -l B

>Added entries in the .rhosts file.
>SYS A : ~A/.rhosts
>SYS B : ~B/.rhosts

Can you do "ll" on these two files so we can check ownership and permissions.

> I tried replacing "+" with the FQDN / short names / host names

I just used my short name. Have you tried using the IP address?

>Accepts username & password, like any other system & login method.

It's almost as if it has the wrong user name.
Can you look at lastb(1) to see what user had a bad login and what the password was.

Re: rlogin

abcd7 — Tue, 03 Jun 2008 21:14:00 GMT

when I explictly specify username with option -l, rlogin & remsh are working from Sys A.

Sys B is still asking for a password.

The Perms of ~/.rhosts 600

I tried with IP, FQDN / Short name & "+". No luck.

Re: rlogin

abcd7 — Tue, 03 Jun 2008 21:17:21 GMT

when I look at the lastb output, user B tops System A & user A tops System B.

As you are aware, user B doesn't exist on System A & vice versa.

Re: rlogin

Dennis Handly — Tue, 03 Jun 2008 21:25:14 GMT

>when I explicitly specify username with option -l, rlogin & remsh are working from Sys A.

Why are you using the word "when" here? You MUST use "-l username" when changing users. I.e. If you are A on SYSA, you tell rlogin you want be B on SYSB.
It then looks in ~B/.rhosts and finds "A" is allowed from SYSA.

Also, what is "working from Sys A"?

Do you have the lastb(1) data?

Re: rlogin

abcd7 — Tue, 03 Jun 2008 21:32:33 GMT

Thanks Dennis !!!

When I use -l, r commands are working without a password from System A.

Sys B is still prompting for a password.

I cant disclose the hostname & usernames, as per our org policy..

Re: rlogin

Dennis Handly — Tue, 03 Jun 2008 21:56:00 GMT

>when I look at the lastb output, user B tops System A & user A tops System B.
>As you are aware, user B doesn't exist on System A & vice versa.

That's why you must use "-l other-username", even if A & B existed on both machines.
That's what Patrick and I have been telling you.

>When I use -l, r commands are working without a password from System A.

From A to B?

>Sys B is still prompting for a password.

From B to B or B to A or what?

>I cant disclose the hostname & usernames, as per our org policy..

(I missed your translated reply.)

For more details, you could use: lastb -R -x

Re: rlogin

abcd7 — Tue, 03 Jun 2008 22:13:47 GMT

Thank U very much.

I could do rlogin without a password, from both the machines.

"-l" did the trick.

Thankz once again to you all.

Re: rlogin

Steven Schweda — Tue, 03 Jun 2008 22:21:18 GMT

> "-l" did the trick.

Actually revealing (at long last, like
pulling teeth) what you were doing had a lot
to do with it.