topic Re: rsh deined in Operating System - Linux

rsh deined

Tonatiuh — Tue, 09 Nov 2004 20:18:18 GMT

[root@RAC2 root]# rsh 1.1.1.1 pwd
Permission denied.

What must I configure to perform this task?

Re: rsh deined

Steven E. Protter — Tue, 09 Nov 2004 20:43:56 GMT

Take a look at the .rhosts file on the root home diredctory of the 1.1.1.1 machine, make sure it allows appropriate access.

Consider replacing the insecure rsh with openssh, which ships on most modern Linux distributions.

Attaching a doc for SAFE password free ssh instead of rsh

SEO

Re: rsh deined

Tonatiuh — Tue, 09 Nov 2004 21:03:33 GMT

>Take a look at the .rhosts file on the
>root home diredctory of the 1.1.1.1
>machine, make sure it allows appropriate
>access.

I do not have a file named /root/.rhosts

Should I create it? what should it be the content of that file?

>Consider replacing the insecure rsh with
>openssh, which ships on most modern Linux
>distributions.

Thanks for the tip, but this is for an Oracle RAC interconnect and this private network is completely separated from the rest of the network nor internet.

Re: rsh deined

Jan Sladky — Tue, 09 Nov 2004 22:34:29 GMT

example of .rhosts

smp3-1m root
smp3-1 root
pluto smsadmin
metis smsadmin
sce3 smsadmin
sce4 smsadmin

where first column is box (if name must be in /etc/hosts or DNS, IP is also allowed), second one trusted user

another way is use /etc/hots.equiv containing trasted box only, name or IP

(After finishing don't forget assign the points, you are doing it very rarely, it is good for all forumers ;-)

Re: rsh deined

Vitaly Karasik_1 — Wed, 10 Nov 2004 03:25:46 GMT

- start rsh on remote linux box
- add client hostname to .rhosts
- if we speak about root user - add "rsh" line to /etc/securetty file

Re: rsh deined

Tonatiuh — Wed, 10 Nov 2004 10:34:50 GMT

I have tried with hosts.equiv and with .rhosts but the problem is still exactly in the same way.

[root@RAC2 root]# cat .rhosts
Nodo1 oracle
Nodo2 oracle
RAC1 oracle
RAC2 oracle
[root@RAC2 root]# cat /etc/hosts.equiv
Nodo1 oracle
Nodo2 oracle
RAC1 oracle
RAC2 oracle
[root@RAC2 root]# cat /etc/hosts
172.16.11.27 RAC1
1.1.1.2 Nodo2
1.1.1.1 Nodo1
172.16.11.28 RAC2
# Do not remove the following line, or various programs
# that require network functionality will fail.

Jan:
>(After finishing don't forget assign the
>points, you are doing it very rarely, it
>is good for all forumers ;-)

I think it is not good to assign points to replays which have not given me a solution to my problem, because all of that would be assigned with zero ('0'). I prefer to wait until the issue is solved and then assign points the the replays that pointed me to the solution.

THANKS a lot in advance!

Re: rsh deined

Vitaly Karasik_1 — Wed, 10 Nov 2004 10:59:19 GMT

>[root@RAC2 root]# cat .rhosts
>Nodo1 oracle

as far as I understand, you should allow rlogin for root user, not oracle.

so I suggest to add to /root/.rhosts "nodo1" line and try to run from nodo1 as root:

rsh rac2 date

Re: rsh deined

dirk dierickx — Mon, 15 Nov 2004 03:47:58 GMT

do you need rsh? perhaps you could achieve the same result with ssh, which is much more secure.

Re: rsh deined

Tonatiuh — Mon, 15 Nov 2004 09:40:46 GMT

Does the command rcp still preserve the same name to be called (rcp)? this is because I am installing an Oracle RAC and I guess Oracle calls the command as rcp.

Re: rsh deined

Vitaly Karasik_1 — Mon, 15 Nov 2004 09:58:06 GMT

no, in ssh suite there is "scp" instead of "rcp".

Re: rsh deined

Muthukumar_5 — Mon, 15 Nov 2004 22:45:45 GMT

You can use the following steps to make rsh to work as,

1. Check for rsh package using
# rpm -qa | grep rsh
following should be present.

rsh-0.17-14
rsh-server-0.17-14

If rsh-server package is not present, install the package.

2. Check rsh configuration using
# chkconfig --list rsh

If rsh is OFF, then make it ON as
# chkconfig rsh on

3. Create a file .rhosts containing '+' as its content in the root directory. ( Specify your own remote shell configuration with hostname or ip-address, username )

4. Check the content of the file /etc/securetty for rsh, rexec, rlogin. If it does not contain them, add them.

5. Comment the line "auth required pam_rhosts_auth.so" in the file /etc/pam.d/rsh.

6. Now you can execute any command on the remote machine using rsh -l

HTH.