configuration of rexec

[fahad_8]

i got this report from security section


bv-Control for Internet Security has found the rexec service running. rexecd (TCP-based remote execution) is a way of executing commands on a remote machine. In rexecd's default configuration, it requires no authentication to execute commands.

Recommendation: You should change the default configuration of rexec to allow authentication.

soo please help me , how can i change the default configuration of rexec

thank you sooo much

[Chan 007]

Hi

Why don't you use ssh (Secure Shell).

Chan

[fahad_8]

thanks for your reply
do you think when we use ssh (Secure Shell), it will solve this problem ??
How ??

Regards

[Warren_9]

hi,

empty /etc/host.equiv and all the .rhosts file on the hosts and it will remove the trust relation.

after that, password require everytime using the "remote" cmd ... such as rlogin, remsh, rexec...

to find the .rhosts
# find / -name .rhosts -exec ls -l {} \;

to empty it
# > .rhosts

cut from the man page.
WARNINGS:
For security reasons, the /etc/hosts.equiv and .rhosts files should exist, even if empty, and they should be readable and writable only by the owner.
Note also that all information, including any passwords asked for, is passed unencrypted between the two hosts.

GOOD LUCK!!

[Rajesh SB · Accepted solution]

Hi,

If you don't want to allow rexec strictly.
Just disable the service by commenting the line in /etc/inetd.conf

#exec stream tcp nowait root /usr/lbin/rexecd rexecd

And restart inetd daemon by /usr/sbin/inetd -c

Regards,
Rajesh

[Chan 007]

Hi

As suggested by other Warren & Raj do that, if you need secured remote shell use the ssh products. Nowadays this products replaced all r* commands like rcp, remsh etc.

Please find SSH details

1. http://docs.hp.com/en/T1471-90005/ch01s02.html

2. Similar question

http://forums1.itrc.hp.com/service/forums/bizsupport/questionanswer.do?threadId=1016331

Chan