topic Re: Kerberos error when trying to rsh in Operating System - Linux

Kerberos error when trying to rsh

WADE S — Sun, 06 Apr 2008 13:18:24 GMT

Can anyone help me out here? I've googled this, and nobody seems to have an answer. I have an HP test program that uses rsh. Whenever I try to rsh to the clients (several varieties of linux but mainly RH5.1), I get the error. "krb_sendauth failed: you have no tickets cached"

I have this working on some clients, but it doesn't seem to work on others, even with the same files modified, eg. hosts, .rhosts, securetty, etc.
Understand, I need no security whatsoever in my environment. I've even moved the securetty file to a .bak, and still no luck.

The rsh service is started on some clients that don't work, but on the RedHat5.1 clients, I don't see the service when I do a chkconfig, & I dont seem to be able to start it, but that's only the issue on RH5.1 clients.

Any help?

Re: Kerberos error when trying to rsh

Vitaly Karasik_1 — Mon, 07 Apr 2008 05:51:45 GMT

you should install rsh-server package and activate rsh:

chkconfig rsh on.

Re: Kerberos error when trying to rsh

skt_skt — Mon, 07 Apr 2008 09:13:54 GMT

i do have similar problem. Will post the result once i test.

Re: Kerberos error when trying to rsh

Justin_99 — Mon, 07 Apr 2008 16:28:59 GMT

Have had a similar issue on test systems. I ended up removing krb5-workstation package and the krb errors went away when I would rsh to a system. Other things you might check are /etc/pam.d/rsh, rlogin, and rexec. Might need to add promiscuous to the files. Think this is for password less access though.

rlogin:
auth sufficient pam_rhosts_auth.so promiscuous

rsh:
auth required pam_rhosts_auth.so promiscuous

Re: Kerberos error when trying to rsh

WADE S — Tue, 08 Apr 2008 13:08:39 GMT

Installing the rsh-server package worked.

I find it odd, that if you don't go in and select custom packages when you install the OS, not even xinetd gets installed.

Thanks for the help.
Wade

Re: Kerberos error when trying to rsh

WADE S — Tue, 08 Apr 2008 14:16:22 GMT

I've got what I need.
Thanks Guys.