How to enable rcp...

[Hoang Chi Cong_1]

Hi gurus,
I have a question, can anyone give me solutions?
I want to disable rlogin service to prevent unauthorize user between some systems (HP-UX 11.i) but allow user using rcp command to remote copy files and directories.
In normal case, I have to add "server user" in .rhosts file to enable rlogin. Then user can use rcp service.
But if I remove it from .rhosts to prevent rlogin service, users can not use rcp service :-(

How to solve this thing?
Any answer will much appreciated!

[Luk Vandenbussche]

rcp works only between trusted hosts.
So you need .rhosts or /etc/hosts.equiv

If you remove it, it wont work

[Orhan Biyiklioglu]

One way should be disabling the rlogind service from inetd.conf while leaving the remshd enabled.

#login stream tcp6 nowait root /usr/lbin/rlogind rlogind
shell stream tcp6 nowait root /usr/lbin/remshd remshd


inetd -c


This will disable rlogin,but the users will still be able to use remsh to invoke commands on the server.

hth

[Muthukumar_5]

.rhosts and /etc/hosts.equiv is unique for r* commands like rlogin, rexec, remsh and rcp. You can do one exception on rlogin to control login then,

In remote machine's /etc/profile check for rlogind as,
ps| grep -q 'rlogin'
if [ ${?} -eq 0 ]
then
# Local passwd authentication check
telnet
fi

rcp will work normally.

-Muthu

[Hoang Chi Cong_1]

Hi
I have found my own solution:
Just add one more line in /var/adm/inetd.sec file:
login allow (or deny)

It works now :)
My system is not in trusted mode.

Thanks you all,
Hoang Chi Cong

[VIKAS AGRAWAL]

just try to hash the login etries of rlogind services from /etc/inetd.conf

vikas