topic Re: Trust relationship between two host in Operating System - HP-UX

Trust relationship between two host

Ryan Gu — Wed, 29 Jan 2003 03:08:01 GMT

When I config MCSG on two N4000 mainforms.I found that I can't create trust relationship between them.
hostA:
hostname: A ip: 1.1.1.1
hostA heart:
name: Ah ip: 10.1.1.1
hostB:
hostname: B ip: 1.1.1.2
hostB_heart:
name: Bh ip: 10.1.1.2
When I write entrys in .rhosts.The result is that I can rlogin A from B,but can't rlogin B from A.I ping from A to B,and from B to A use hostname.It's verything is Ok.
I tried to use heartbeat name(Ah&&Bh),the trust relationship is work well.
why?please help me.

Re: Trust relationship between two host

Rajeev Shukla — Wed, 29 Jan 2003 03:14:54 GMT

What is message you are getting when you do rlogin from A to B does it ask for password or just disconnects.
Also check the /var/adm/inetd.sec file for any allow or deny.
And use /etc/hosts.equiv file instead of .rhosts for MCSG.
Also you should put the name of server what you get from nslookup in .rhosts.
Like do nslookup 1.1.1.1 and nslookup 1.1.1.2, what even names it returns put them in .rhosts.
It should work.

Rajeev

Re: Trust relationship between two host

RAC_1 — Wed, 29 Jan 2003 03:20:21 GMT

log on to B from A with user and pass.(Same user you are using for rlogin)

do

who -u
Does it show the same hostname/ip you have put in B's .rhosts file?

Post the results.

Re: Trust relationship between two host

Ryan Gu — Wed, 29 Jan 2003 03:49:08 GMT

When I rlogin B from A,it ask for password.
I used hosts file to resolve the hostname.I can ping A from B,and ping B from A by hostname.
And all ip are allow in inetd.sec file whethter telnet or ftp.
I tried to use ip instead of hostname in .rhosts,then everything is ok.
It's not first time I meet this question.
I want to know why.

Re: Trust relationship between two host

Rajeev Shukla — Wed, 29 Jan 2003 04:04:14 GMT

That clearly means that everyhting is fine like /var/adm/inetd.sec just the problem of .rhosts
Dont use IP address in .rhosts it wont work.
Its very simple as i said before do a nslookup on the IP address and what host name it returns thats what you have to put in .rhosts
say on host B if nslookup 1.1.1.1 returns "abc"
put exactly the same in .rhosts
trust me it will work.

Rajeev

Re: Trust relationship between two host

Steven E. Protter — Wed, 29 Jan 2003 04:21:38 GMT

Another annoying suggestion.

Stop using rhosts and Berkely protocols.

download and install ssh scp sftp in the secure shell package.

Post a request and I'll give you a roadmap on how to exchange public keys and get away from the Berkely unsecure protocols.

P

Re: Trust relationship between two host

Ryan Gu — Wed, 29 Jan 2003 05:46:17 GMT

Thanks Rajeev,I will do it follow your advice.But It works well when I use IP in .rhosts,and MCSG works well also.

Steven,please tell me how to resolve this problem by SSH.Thank you.