remshd error from syslog

[Carles Viaplana]

Hello,

Since this morning we're receiving the following error:

Jun 13 08:31:22 remshd[1242]: connect second port: Connection refused

What does this error means?
Is my system or a remote host trying to open remsh connection?
Do you have any idea?

I checked syslog and we had never got this error before.

Thanks in advance for your help.
Regards,

Carles

[Arunvijai_4]

Hi Carles,

Take a look at, http://groups.google.com/group/comp.sys.hp.hpux/browse_thread/thread/fab9a8b074c930a9/11d2165a3a8e62cb%2311d2165a3a8e62cb

It may help you.

-Arun

[Carles Viaplana]

Thanks Arun for your reply.

In fact I'm able to execute any r commands. Problem is system received or execute remshd command and it failed, so I need to know what executes remshd command and why it failed.

Is there any log file about network or r commands I can check?

Thanks in advance for your help.
Regards,

Carles

[Chauhan Amit · Accepted solution]

Check out this thread

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=435929&admit=-682735245+1150185883613+28353475

Check your cron jobs also , some job may be failing .

-Amit

[Carles Viaplana]

Hello Amit,

I read thread you sent and it could be the cause.

Is there any way to know which remote system is trying to connect to?

About crontab, it was 1st check I did and all is working fine.

Thanks in advance for your help.
Regards,

Carles

[Ninad_1]

Hi,

Is the host mentioned in the entry in suslog file authorised to execute remote commands on this server ? I guess not and hence the message.
You need to check on the server which is trying to execute the remote commands - for what is doing that - any cron jobs etc. and not on the server where it is showing you these logs.

Regards,
Ninad

[Chauhan Amit]

Hi Carles,

#who -T

above command gives you IP address of system are connected.

There will be an entry in syslog of the IP address trying to access this system.

-Amit

[Carles Viaplana]

Well,

I think I have to detect remshd action online and not later checking syslog file.

Thanks to all for your answers.
Regards,

Carles

[Enrico P.]

Hi,
you can enable remote connection logging in the syslog.log file with the -l option of the inetd. This should show you the IP of the remote hosts.

/usr/sbin/inetd -l

Enrico