topic Re: remsh login incorrect in Operating System - HP-UX

remsh login incorrect

cl_5 — Wed, 07 May 2003 12:18:53 GMT

Hi!

remsh is a never ending story!

I??ve got a machine with HP-UX 11 installed on.
I put in the command:
# remsh $(hostname) id
And get remshd: login incorrect.
I??ve got a NIS environment and the group cmsunix contains all unix-hosts in the network. So I put +@cmsunix in .rhosts and hosts.equiv. I also checked the inetd.conf and it seems to be OK.

Any ideas?

Thanks in advance
Carsten

Re: remsh login incorrect

Donny Jekels — Wed, 07 May 2003 12:23:29 GMT

what have you done on the remote host?

Re: remsh login incorrect

John Dvorchak — Wed, 07 May 2003 12:33:17 GMT

On the machine that you are trying to run the remsh command, do you have a .rhosts file for that "id" and it includes the machine that you are trying to remsh from?

The target machine doesn't like something about your user id or the machine that you are issueing the remsh command from. When I have these types of permissions problems I telnet to the target machine and do a who -u to make sure that the target .rhosts file's machine and or ID is the same as the output from who -u.

Good luck

Re: remsh login incorrect

Dario_1 — Wed, 07 May 2003 12:44:37 GMT

Hi!

Here are two interesting posts about this issue:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x66ffa12d6d27d5118fef0090279cd0f9,00.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x0cff5f49dbb6d611abdb0090277a778c,00.html

Regards,

DR

Re: remsh login incorrect

Frederic Sevestre — Wed, 07 May 2003 12:44:47 GMT

Hi,

Check permissions on .rhosts file, it sould be 640.
Check name resolution using nslookup from both servers.

Regards,
Fr??d??ric

Re: remsh login incorrect

cl_5 — Wed, 07 May 2003 12:51:11 GMT

$(hostname) is the local machine.

Re: remsh login incorrect

cl_5 — Wed, 07 May 2003 12:57:42 GMT

If I put the hostname into .rhosts, remsh runs without any error. But this is not what I want. I??ve got a NIS Map called netgroup which should do this.

Re: remsh login incorrect

Steven E. Protter — Wed, 07 May 2003 14:06:10 GMT

I don't think .rhosts is compatible with what you want to do.

hostname, ipaddress or nothing.

Its a networking tool, and an insecure one at that.

I'd take out the + sign. Its a security hole big enough to run an A1 Abrams tank through.

Also check both machines for /etc/hosts.equiv /var/adm/inetd.sec entries that might be interfereing with your networking.

SEP

Re: remsh login incorrect

Shannon Petry — Wed, 07 May 2003 15:42:17 GMT

The netgroup map has absolutely nothing to do with a .rhosts nor an /etc/hosts.equiv.

There are certain services that can use a netgroup file, I.E. NFS, but definately not remsh(rsh on any other Unix).

To allow users a global login to any maching, they need to have listings in /etc/hosts.equiv. root account does not use /etc/hosts.equiv, and will require $HOME/.rhosts.

Now, interestingly I dont know if your example will work anyway. Normally you need to be the authenticated user to use a remote shell with no password, meaning if you type "remsh host someone" and the someone is not who your logged in as, then you will have further issues.

Regards,
Shannon