topic Re: rlogin problem in Operating System - HP-UX

rlogin problem

Shyam Sundar — Tue, 22 Jan 2002 10:26:58 GMT

Hi,

We have a setup of 7 HP9000 systems. In that system ONE is exporting home filesystem(all users home directories) and all the other systems are mounting that. Also the /etc/passwd file for all the systems is same.

So whenever a user is logging in any of the system he is getting into the same home directory(becos. of NFS mounts).

All the users have a .rhosts file in their respective home directories with the entry of "+ +". Becos. of this entry, all the users are able to rlogin from their current system to the remaing systems without any authentication.

Now for the last one week, from System ONE rlogin is not happening to System TWO for any user. Its giving the following error,

"rlogind:Host address mismatch".

At the same time all the users from System ONE is able to rlogn to the systems(except System TWO).
Similarly users from other systems are able to rlogin to System TWO without any problem.

Importantly all users from System TWO are able to do rlogin to System ONE. From System ONE name resolution had been checked(nslookup using /etc/hosts from local system).

When we remove the .rhosts entry from a users home directory, rlogin is happening from ONE to TWO for that particular user with authentication.

Could someone help me on resolving this problem.

Thanks and Regards,
Shyam

Re: rlogin problem

Steven Sim Kok Leong — Tue, 22 Jan 2002 10:39:46 GMT

Hi,

Just a hunch. Check the reverse IP lookup for the IP addresses on both servers.

Is both the reverse IP resolution and forward name resolution on both systems in sync?

Hope this helps. Regards.

Re: rlogin problem

Ravi_8 — Tue, 22 Jan 2002 10:41:14 GMT

Hi,
looks like hostname or ip of system 2 has been changed, check the /etc/passwd and /etc/group files in system 2 whether they have +:: entry.
if not, make this entry.

Re: rlogin problem

Brian Hackley — Tue, 22 Jan 2002 17:48:14 GMT

Shyam,

Fix for this issue is in 11.0 r-commands patch PHNE_21731 or better on the "target" box; but you might as well patch 'em all.

After install the patch, add the -s flag to the end of the /etc/inetd.conf entries for login and shell, and run inetd -c to tell inetd to re-read the config files.

By the way, a .rhosts file as you describe is a grave security risk. Instead you should /etc/hosts.equiv to list the trusted hosts from which all users are allowed access, and make that /etc/hosts.equiv the same on all of the HP's. If you need a .rhosts for root, you should make /.rhosts read
hosta root
hostb root
hostc root
...

and make /.rhosts owned by root, and permissions 400.

Hope this helps,

-> Brian Hackley