topic Re: $tcpip show proxy in Operating System - OpenVMS

$tcpip show proxy

shiva27 — Tue, 26 May 2009 09:05:27 GMT

Hi All,

I need you help once again,

I want to do the RSH setup for two accounts,so user are using X-start emulation software to login into VMS servers thru RSH.
1.In OLD setup server working fine for this RSh-V7.3-2
2.New setup server giving error "TCPIP$RSh -permission denied -host Ip address" - V8.3
3.when i enable reply/enable at our system side - captured log on screen "NTERnet ACP RSH Reject Request - no proxy cache - from Host:"

4.I compared both setup,found difference
Old server :
$tcpip sho proxy
tcpip show proxy

VMS User_name Type User_ID Group_ID Host_name

London CD * *
Germani CD * *

New server :
$tcpip sho proxy
%TCPIP-E-PROXYERROR, error processing proxy request
-TCPIP-W-NORECORD, information not found
-RMS-E-RNF, record not found

Is is because of this user are not able to do the RSH. If so may i know the correct syntac to define this.

Re: $tcpip show proxy

marsh_1 — Tue, 26 May 2009 09:57:12 GMT

hi,

what is the reason for using rsh ? as you're moving systems this might be a good time to consider using ssh instead of rsh, rsh /rlogin et al are all inherently insecure. if you are using the openvms tcpip stack there is support for ssh/scp/sftp in both v7.3-2 and v8.3.

hth

Re: $tcpip show proxy

shiva27 — Tue, 26 May 2009 10:06:48 GMT

This is management requirement, they don't want to change the process for some more time.

Re: $tcpip show proxy

Joseph Huber_1 — Tue, 26 May 2009 11:31:19 GMT

To define TCPIP communication proxies:
in tcpip:
HELP ADD PROXY

The relevant proxy type for RSH is "communication proxy", so You need to specify
/HOST and /REMOTE_USER for the the add command.
And if You need to make many proxies, there is a limit, which can be changed by a parameter
SET CONFIGURATION COMMUNICATION/PROXIES=n
and requires a TCPIP services restart to become active.
Exceeded limits manifest in missing "D
" in show proxy.

Re: $tcpip show proxy

Jon Pinkley — Tue, 26 May 2009 13:41:37 GMT

shiva27,

RE:"I need you help once again,"

Why don't you have the courtesy to take the time to thank the people that help you by assigning points?

Jan pointed out the way to assign points on May 22, in a response to your question about set host, but got no reaction.

"I'm too busy" is not a valid excuse; other people's answers have saved you far more time than assigning points takes.

Zero points for this.

Jon

Re: $tcpip show proxy

Peter Zeiszler — Tue, 26 May 2009 14:49:51 GMT

$tcpip add proxy (local account) /host=(remote host - whatever your DNS returns for that IP)/remote_user=(remote users account)

I never like using wildcards in the remote host cause ANYONE with that account registered can then gain access to the VMS host.

So to repeat yours exactly (which is not very secure):
tcpip add proxy London /host=* /remote_user=*

Then remember to bounce your proxy server.
$ @sys$startup:tcpip$proxy_shutdown
$ @sys$startup:tcpip$proxy_startup

Re: $tcpip show proxy

shiva27 — Wed, 27 May 2009 04:44:27 GMT

Thanks all , RSH issue fixed by defining this proxies.

Re: $tcpip show proxy

shiva27 — Wed, 27 May 2009 07:04:49 GMT

Thx all.

Re: $tcpip show proxy

RF Thomas — Mon, 04 Jun 2012 16:11:48 GMT

This site is invaluable. A quick search allowed me to find this. The documentation does not mention the need to stop and restart the proxy server. We spent a lot of time going around in circles attempting to resolve our RSH authentication problem.