remsh login incorrect

[cl_5]

Hi!

remsh is a never ending story!

I??ve got a machine with HP-UX 11 installed on.
I put in the command:
# remsh $(hostname) id
And get remshd: login incorrect.
I??ve got a NIS environment and the group cmsunix contains all unix-hosts in the network. So I put +@cmsunix in .rhosts and hosts.equiv. I also checked the inetd.conf and it seems to be OK.

Any ideas?

Thanks in advance
Carsten

[Donny Jekels]

what have you done on the remote host?

[John Dvorchak]

On the machine that you are trying to run the remsh command, do you have a .rhosts file for that "id" and it includes the machine that you are trying to remsh from?

The target machine doesn't like something about your user id or the machine that you are issueing the remsh command from. When I have these types of permissions problems I telnet to the target machine and do a who -u to make sure that the target .rhosts file's machine and or ID is the same as the output from who -u.

Good luck

[Dario_1]

Hi!

Here are two interesting posts about this issue:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x66ffa12d6d27d5118fef0090279cd0f9,00.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x0cff5f49dbb6d611abdb0090277a778c,00.html

Regards,

DR

[Frederic Sevestre]

Hi,

Check permissions on .rhosts file, it sould be 640.
Check name resolution using nslookup from both servers.

Regards,
Fr??d??ric

[cl_5]

$(hostname) is the local machine.

[cl_5]

If I put the hostname into .rhosts, remsh runs without any error. But this is not what I want. I??ve got a NIS Map called netgroup which should do this.

[Steven E. Protter]

I don't think .rhosts is compatible with what you want to do.

hostname, ipaddress or nothing.

Its a networking tool, and an insecure one at that.

I'd take out the + sign. Its a security hole big enough to run an A1 Abrams tank through.

Also check both machines for /etc/hosts.equiv /var/adm/inetd.sec entries that might be interfereing with your networking.

SEP

[Shannon Petry]

The netgroup map has absolutely nothing to do with a .rhosts nor an /etc/hosts.equiv.

There are certain services that can use a netgroup file, I.E. NFS, but definately not remsh(rsh on any other Unix).


To allow users a global login to any maching, they need to have listings in /etc/hosts.equiv. root account does not use /etc/hosts.equiv, and will require $HOME/.rhosts.

Now, interestingly I dont know if your example will work anyway. Normally you need to be the authenticated user to use a remote shell with no password, meaning if you type "remsh host someone" and the someone is not who your logged in as, then you will have further issues.

Regards,
Shannon