inetd question

[thebeatlesguru]

login stream tcp nowait root /usr/lbin/rlogind rlogind

i cant understand it exactly .

[Michael Tully]

Hi,

This line of configuration allows you to
'rlogin' from another server. If there is
a '.rhosts' fil ein the users home directory
that can effectively login to your server
without a password. If you wish to secure
your server better, you could comment this
line out of the '/etc/inetd.conf' file.

Service name (login) socket type (stream)
Protocol (tcp) User (root) path to program

The entry of 'root' means that this service
is capable of allowing 'root' to login to
your server without a password if there is
a 'rhosts' file existing in 'root's' home
directory with the correct information
included.

Most, if not all of this information can be
found on the 'inetd.conf' man page.

HTH
-Michael

[SHABU KHAN]

Hi,

rlogin is just like a telnet program which allows users to login to their servers ..

telnet stream tcp nowait root /usr/lbin/telnetd telnetd
login stream tcp nowait root /usr/lbin/rlogind rlogind

telnet
rlogin

Software like Exceed uses these types of start method to login to the servers.

If you would want your users to only use telnet to login to their servers you could comment the rlogin line from the /etc/inetd.conf file and do a Kill -HUP

>egrep 'telnet|rlogin' /etc/inetd.conf
telnet stream tcp nowait root /usr/lbin/telnetd telnetd
#login stream tcp nowait root /usr/lbin/rlogind rlogind

>ps -ef|grep inetd
root 772 1 0 Jan 2 ? 1:56 /usr/sbin/inetd

>kill -1 772

This will re-read the inetd.conf file, and now users could use only telnet to login to your server.

The other popular start methods apart from telnet and rlogin are:
rexec
rsh
ssh (needs different setup)

As stated earlier man inetd will give you a lot of information.

Hope this helps !

-Shabu
>Kill -HUP

[K.Vijayaragavan.]

Hi,

This particular line in /etc/inetd.conf file is responsible for running the rlogin service available at the TCP port number 513 as defined in the /etc/services.

i.e.
Users can do rlogin to your server just because of this line.

-Vijay