topic Re: running remsh with su in Operating System - HP-UX

running remsh with su

Safdar Mustafa — Fri, 12 May 2006 04:08:36 GMT

Hi,

I am trying ro run a command from server1 to remotely execute on server2. However, the command requires the following:

su diff-user
csh
source /etc/example.cshrc
./run-command-in-script

Is there a simple way to do this?

So far I have unsuccessfully tried:

server1(root)# remsh server2 su diff-user -c "csh /path/run-command-in-script"

....failed miserably :-)

Re: running remsh with su

Warren_9 — Fri, 12 May 2006 04:12:49 GMT

hi,

u don't need to use su, you can remsh to other user.

# remsh host [-l username] command

GOOD LUCK!!

Re: running remsh with su

Peter Nikitka — Fri, 12 May 2006 04:20:46 GMT

Hi,

I would enable a passwordless connection from root@server1 to diffuser@server2:
(as diffuser@server2): echo server1 root >>~/.rhosts

and then (as root@server1) use
remsh diffusr@server2 "csh -c 'source /etc/example.cshrc; ./run-command-in-script'"

to connect to server2.

mfG Peter

Re: running remsh with su

Chan 007 — Fri, 12 May 2006 04:31:10 GMT

Hi,

What about this script in remote server

as /tmp/test.sh
su diff-user
csh
source /etc/example.cshrc
./run-command-in-script

You run just
remsh server2 /tmp/test.sh

Chan

Re: running remsh with su

Jakes Louw — Fri, 12 May 2006 04:38:54 GMT

Sorry, no simple way...
If you want to execute something under diffuser@server2, then a trusted relationship of some kind is required.
That means either remsh or ssh.

However: have you tried putting your su in a script and executing the script?

# echo "su diff-user -c 'csh /path/run-command-in-script'" > local_dir/scriptname
# chmod 750 scriptname
# rcp local_dir/scriptname server2:~/scriptname
# remsh server2 scriptname

Might work?

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 04:50:27 GMT

Peter,

remsh diffusr@server2 cmd
does not work, my .rhosts is set ok with passwordless connection (works ok with remsh server2 cmd) - but is does not like diffuser?server2.
Gives: rcmd: diffuser@server2: Unknown host

Chan,
Tried script previously but su diffuser line terminates the script because it switches user and cannot continue the script. That's why I am looking for maybe a one-liner.

Re: running remsh with su

Jakes Louw — Fri, 12 May 2006 04:55:02 GMT

An amendment to my previous post:

echo "su - diffuser -c ......"

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 05:08:40 GMT

Warren,
-l username does not work for other than root user.

Get error: remshd: Login Incorrect.

Jakes, still trying to figure yours out. Not sure it applies in my case but will do some testing anyway.

Re: running remsh with su

Chan 007 — Fri, 12 May 2006 05:18:04 GMT

try
remsh server2 -n "your commands"

Chan

Re: running remsh with su

Jakes Louw — Fri, 12 May 2006 05:19:28 GMT

Safdar, the idea is to encapsulate your su call INSIDE a script, then execute that script as a single call.
Here's the steps:
1) Put the call to "su" inside a script on the local server (my echo statement)
2) change the permissions on the local file (chmod ....)
3) remote copy the file (which preserves the chmod settings) to root on that side (rcp ....)
4) use remsh to execute this script, which then does an "su - diffuser -c ...." (remsh server2 script)

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 05:53:51 GMT

Thanks Jakes,
I definately see where your coming from, and this is what I have been trying for a while, however I cannot get the script to work on the local server even. In theory it should work, but its failing. Quite annoying since its quite a basic thing to do :-)

Will keep debugging.

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 06:07:26 GMT

Alhumdulillah!!!

I cracked it... /etc/hosts.equiv made the difference I think. The following now works:

server1: remsh server2 -l diffuser "csh -c 'source /etc/xxxx.cshrc'; /myscript"

Thanks all you guys for you help.

Safdar

Re: running remsh with su

Enrico P. — Fri, 12 May 2006 06:08:51 GMT

Hi,
you can try to write the script in this form:

su - diff-user << EOF

command1
command2
.....

EOF

and remsh it

Enrico

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 08:28:57 GMT

hey, you da man...

That looks to be the best working solution for all in one script. Reduces user error on running from command line.

Thanks 10/10!!

Safdar

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 08:30:42 GMT

..the last message was meant for Enrico..

Re: running remsh with su

Jeff Schussele — Fri, 12 May 2006 08:37:33 GMT

Hi Safdar,

Not to scold but you *really* should be using ssh for this.
remsh is extremely insecure - I could run ethereal or tcpdump & get your PW or compromise your .netrc file as well.
You'll fail ANY SOX audit if you're using remsh.
It's *so* 90s :~()

My $0.02,
Jeff

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 08:52:43 GMT

Hi Jeff,

Thannks for the advice, but I don't seem to have ssh on my servers running 11.11.

#ssh server2
sh: ssh: not found.
#ksh
#ssh server2
ksh: ssh: not found
#man ssh
No manual entry for ssh.

how do I get it working...?

Re: running remsh with su

Jeff Schussele — Fri, 12 May 2006 09:03:26 GMT

Hi (again) Safdar,

The product number is T1471AA & it's available for free here:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Rgds,
Jeff

Re: running remsh with su

Safdar Mustafa — Fri, 12 May 2006 09:09:03 GMT

Thanks for you help, Jeff.

Re: running remsh with su

Jeff Schussele — Fri, 12 May 2006 09:15:18 GMT

Anytime my friend.
Just understand that there'll be a learning curve here.
But the upside is that it's much more versatile than remsh. For instance you can pass keys between servers & login, run remote processes, do secure ftp & copies all w/o having to pass PWs. But even if you do - they're encrypted as well as *all* data.

Rgds,
Jeff