remsh issue

[Andres_13]

Ok, i have 3 vPars on a integrity superdome running HP-UX 11.23.

serv1 -> vPar0
serv2 -> vPar1
serv3 -> vPar2

serv1's .rhosts file is as foolow:
serv2
serv3

When i try remsh from serv2 to serv1 it alwas ask for a password; when i try remsh from serv3 to serv1 all Ok.

Can any of you help me?
Thanks & regards.

[Steven E. Protter]

Shalom,

Check the permissions on the .rhosts file and the contents and ownerhip of said file. Also see that /etc/hosts.equiv are consistent.

Consider using openssh/HP Secure shell to make the transaction secure.

SEP

[Peter Godron · Accepted solution]

As a follow-up to Steven's posting, the permisssions on .rhosts should be rw------- (600) and the file should be owner by the user.

No points please

[Andres_13]

Hi Steve, ser1's .rhosts permissions:

-rw-r--r-- 1 root sys 18 Aug 3 09:44 .rhosts

The /etc/hosts.equiv does not exist in serv1.

Thanks & regards

[Andres_13]

Steve/Peter,

I'd set to 600 the .rhosts permissions, still ask for password from serv2 and still ok from serv3.

Thanks & Regards

[Josiah Henline]

Are your UIDs the same on all of the systems?

[Andres_13]

Hi Josiah,

The user id is the same on all servers, i´m tryiing with root so th UID is 0 in all three.

Any clues?

Thanks & Regards.

[Mel Burslan]

did you try modifying the serv1's .rhosts file as follows :

serv2 root
serv3 root

it is a simple change to test. I am not sure what the case is in your situation but somehow, serv1 is not getting your effective uid from serv2 whereas it can get it from the serv3 connection.

on serv2, check to see if remsh has been aliased to a different command which is circumventing passing the right id, or if there is a wrapper script named remsh in your search path.

[Andres_13]

Thank you all guys, but still ask for user's password, thats really extrange because this is the only one.

I have /etc/securetty; other hosts Ok, serv2 ask for a password.... i don´t know why....

I've been looking for a clue but nothing.

(Really desperate!)

Regards.

[Mel Burslan]

an idea

when you are trying to remsh from serv2 to serv1,, do a "tail -f /var/adm/syslog/syslog.log" on serv1 and see what messages you are getting there.

make sure your inetd is running with -l options prior to that. If not, kill inetd and start with -l option.

[Andres_13]

...