Can rcp and remsh, but no rlogin

[Ian Dennison_1]

I can rcp to a new system from my management server, and remsh as well. However, I cannot rlogin at all!

I have both the FQDN and the regular hostname in /.rhosts for user root; each server is resolvable by IP and hostname on the other. This is really weird, the new server is a brand-new install of 11.11, and the config is identical to all the other servers.

Any gotchas out there that anyone knows about? Share and Enjoy! Ian

[Devender Khatana]

Hi,

#ps -ef|grep rlogind

The rlogin daemon may not be running on the host. If there is no output in above command then check the configuration by viewing at
/etc/inetd.conf and see for the line
login stream tcp nowait root /usr/lbin/rlogind rlogind

If the line is hashed then remove it and do

#inetd -c

HTH,
Devender

[Arunvijai_4]

Hello Ian,

Take a look at these thread,

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=922831
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=40567
http://www2.itrc.hp.com/service/james/search.do?todo=search&admit=-1335382922+1138093629409+28353475&searchtext=no+rlogin&from=forums&origin=0&submit.x=0&wpa=forums1.itrc.hp.com%3A80&submit.y=0&searchcategory=ALL&hpl=1&searchcriteria=allwords&rn=25&source=7000&presort=rank&chkServStor=on&esc=us.support.itrc.hp.com

-Arun

[Ian Dennison_1]

Dev,

rlogind is configured in /etc/inetd.conf but is not running.
tw02n0v0:/> grep login /etc/inetd.conf
login stream tcp nowait root /usr/lbin/rlogind rlogind
# The standard remshd and rlogind do not include the Kerberized
klogin stream tcp nowait root /usr/lbin/rlogind rlogind -K
tw02n0v0:/>
tw02n0v0:/> inetd -c
tw02n0v0:/> ps -ef |grep login
root 1594 1570 0 Dec 20 ? 0:00 /usr/dt/bin/dtlogin
root 20998 20975 0 09:12:45 pts/ta 0:00 grep login
tw02n0v0:/>
tw02n0v0:/> ll /usr/lbin/rlogind
-r-xr--r-- 1 bin bin 36864 Mar 18 2004 /usr/lbin/rlogind
tw02n0v0:/>

This looks like a reboot to me. Share and Enjoy! Ian

[Muthukumar_5]

Try as,

# remsh

remsh without option will work as rlogin. Is it working?

--
Muthu

[Ian Dennison_1]

"remsh " gives the same result as "rlogin ".

I killed and restarted the inetd daemon on the remote server, with the "-l" option. I attempt to rlogin and get the following entry in /var/adm/syslog/syslog.log.

tw02n0v0 inetd[21561]: login/tcp: Access denied for bc02n0v0 (53.202.170.94) at Tue Jan 24 09:18:09 2006

Yet this server name is in /.rhosts and /etc/hosts.equiv. Stranger and stranger.

Any further ideas? Share and Enjoy! Ian

[Muthukumar_5]

Dev and Ian,

rlogind will be invoked when a request comes as rlogin. When you check ps -ef | grep rlogind it will not give process that there is no access for rlogin.

Try to check this,

a) /etc/services

exec 512/tcp # remote execution, passwd required
login 513/tcp # remote login
who 513/udp whod # remote who and uptime
shell 514/tcp cmd # remote command, no passwd used
syslog 514/udp # remote system logging
printer 515/tcp spooler # remote print spooling
timed 525/udp timeserver # remote clock synchronization
remotefs 556/tcp rfs_server rfs # Brunhoff remote filesystem
rlb 1260/tcp # remote loopback diagnostic
nfsd 2049/udp # NFS remote file system
nfsd 2049/tcp # NFS remote file system
rfa 4672/tcp # NS remote file access
kshell 544/tcp krcmd # Kerberos remote shell -kfall
ekshell 545/tcp krcmd # Kerberos encrypted remote shell -kfall

b) /etc/pam.conf

for rlogin authentication.

c) profile file setup.

What is the error message you are getting when doing rlogin??

--
Muthu

[Arunvijai_4]

Hi Ian,

Do you have PHNE_33791 installed ? It is a 11.11 r-commands cumulative mega-patch

http://www2.itrc.hp.com/service/patch/patchDetail.do?BC=patch.breadcrumb.main|patch.breadcrumb.search|&patchid=PHNE_33791&context=hpux:800:11:11

-Arun

[Ian Dennison_1]

In reply

A) All services present.

B) No occurence of "rlogin" in any of my other servers in /etc/pam.conf.

C) Message reads from syslog.log
inetd[21561]: login/tcp: Access denied for bc02n0v0 (53.202.170.94) at Tue Jan 24 09:30:47 2006

Share and Enjoy! Ian

[Ian Dennison_1]

Cracked it. Gotta go to a meeting. more later.

Share and Enjoy! Ian

[Ian Dennison_1]

File /var/adm/inetd.sec was present and had an entry in for a server, which seemed to block all other servers.

Removed file, problem went away. Thanks all for assistance, share and enjoy! Ian