topic Re: system remote login in Operating System - HP-UX

system remote login

O'lnes — Mon, 07 Oct 2002 10:48:40 GMT

I have problem in run the remote login, the below is the problem:

From Host_A run
remsh Host_B -l testuser touch /tmp/file -- > successful to create file
remsh Host_C -l testuser touch /tmp/file -- > remshd: Login incorrect
remsh host_A -l testuser touch /tmp/file -- > remshd: Login incorrect
all hosts host_A ,host_B & host_C has set the file ~testuser/.rhosts as :
+ testuser
+ testuser
+ testuser

Can suggest what this happen? thx.

Re: system remote login

Clemens van Everdingen — Mon, 07 Oct 2002 10:50:35 GMT

Hi,

Idea !

Check to see whether the remsh entry in /etc/inetd.conf contains the -l
option (for example):

shell stream tcp nowait root /usr/lbin/remshd remshd -l

If so, then remove the -l entry (for example):

shell stream tcp nowait root /usr/lbin/remshd remshd

and tell inetd to reread the /etc/inetd.conf file:

inetd -c

C.

Re: system remote login

Paula J Frazer-Campbell — Mon, 07 Oct 2002 10:51:01 GMT

HI
Check your routing to the failing hosts.

Paula

Re: system remote login

U.SivaKumar_2 — Mon, 07 Oct 2002 10:51:32 GMT

Hi,
Any errors in syslog file ?

regards,
U.SivaKumar

Re: system remote login

U.SivaKumar_2 — Mon, 07 Oct 2002 11:00:43 GMT

Hi,

Are you running remsh as testuser in the localmachine ?. you should have same user listed .rhosts of remote hosts in local machine also.

To override this use -l option for remshdshell stream tcp nowait root /usr/lbin/remshd remshd -l

regards,
U.SivaKumar

Re: system remote login

O'lnes — Mon, 07 Oct 2002 11:02:39 GMT

hi Clemens van Everdingen,

I checked the file , on my setting, it is "-K" not "-l", what should i do then? Thx.

Re: system remote login

Clemens van Everdingen — Mon, 07 Oct 2002 11:08:54 GMT

Hi,

If the -K is not on the other working system, I would remove it and try again.
In man remsh I can not find a -K option.
See man remsh for the -l option and others.

C.

Re: system remote login

Darrell Allen — Mon, 07 Oct 2002 11:22:47 GMT

Verify testuser owns the .rhosts file and the permissions are 600.

Darrell

Re: system remote login

O'lnes — Mon, 07 Oct 2002 11:36:43 GMT

Hi ,

Bost host_A and host_B are "-K" in /etc/inetd.conf

"kshell stream tcp nowait root /usr/lbin/remshd remshd -K"

I tried to remove this , but still not work, can someone suggest? Thx.

Re: system remote login

Clemens van Everdingen — Mon, 07 Oct 2002 11:40:27 GMT

Hi,

My line in hp-ux 11.00 is:

shell stream tcp nowait root /usr/lbin/remshd remshd

How is your line on the working system ?

C.

Re: system remote login

Clemens van Everdingen — Mon, 07 Oct 2002 11:40:33 GMT

Hi,

Forgot to ask:

Do you have a inetd.sec and a hosts.equiv file?
And what is in it ?

Did you check the permissions of the .rhosts file ?

C.

Re: system remote login

U.SivaKumar_2 — Mon, 07 Oct 2002 11:44:18 GMT

Hi,
simply put this line in /etc/inetd.conf
shell stream tcp nowait root /usr/lbin/remshd remshd -l

#inetd -c

This should work.

kshell and -K option is for KERBEROS AUTHENTICATION>

Regards,
U.SivaKumar

Re: system remote login

O'lnes — Mon, 07 Oct 2002 12:39:37 GMT

Hi
Clemens van Everdingen ,

1. I have add host_C to host_A's host.equiv file,

2. part of inetd.sec is

ftp allow
telnet allow
login allow
shell allow
exec allow
auth allow
printer allow
daytime allow
echo allow
discard allow
chargen allow
kshell allow
klogin allow
time deny

hi
U.SivaKumar,

I add the line in both hosts, but it still not wrok.

Re: system remote login

O'lnes — Mon, 07 Oct 2002 12:46:48 GMT

hi Clemens van Everdingen,

I tried to add the the host name of host_C to host_A's hosts.equiv file and , but still not work.

Re: system remote login

Darrell Allen — Mon, 07 Oct 2002 13:29:54 GMT

Perhaps it's a host name resolution problem. Rlogin from hostA to hostB. Do "who am i -T" and note the name/IP address of where you logged in from. That is what needs to be in .rhosts.

Darrell

Re: system remote login

O'lnes — Tue, 08 Oct 2002 02:49:30 GMT

I sure the .rhosts setting is OK, can somesome suggest what this happen?
Thx.

Re: system remote login

U.SivaKumar_2 — Tue, 08 Oct 2002 03:53:48 GMT

Hi,
olnes.
Do you have user testuser at the local server also. If no create it in the local server. Then
try again remsh.

regards,
U.SivaKumar

Re: system remote login

RAC_1 — Tue, 08 Oct 2002 03:57:57 GMT

You checked remshd -l.

telnet to respective machines and do who -u.

The machine name or ip in the last column should be there in your host file and accordingly in your .rhosts files.

Regards,

Re: system remote login

Matt Walker_1 — Tue, 08 Oct 2002 10:43:16 GMT

Before you go through and make all kinds of changes, you might want to perform this simple task first...

Check the permissions on the .rhosts files.
If the OWNER of the .rhosts file doesn't have READ access to the file then the "remsh" command will fail.

Note: Considering the fact that you are getting the message "remshd: Login incorrect"
should automatically tell you that the daemon on the remote system is running. If the service was unavailable you will get a registration error...

Re: system remote login

Telia BackOffice — Tue, 08 Oct 2002 10:56:36 GMT

Do you have a firewall betwine the servers or and IP router ?

else you should see messages with failed login.

the + should be in the .rhosts file owned by the user (in user home dir with read permissions). Another sollution could be the system wide:
/etc/host.equiv
here you could add all the servers witout a +.

BR,
Jannik