remshd: Login incorrect. New Problem

[Peter Chang_9]

Hi all,

I know there have been several threads that have answered similar questions, but I believe my situation is a bit different.

I have 2 servers, A and B.
I login as myself, then su to informix user.

On Server A, I can
remsh serverB ls

On Server A, I can
rlogin serverB

On Server B, I can
rlogin serverA

BUT I can't on serverB do
remsh serverA ls

I get the remshd: Login incorrect. message

thx for ur help

[Naveej.K.A]

Hi,

On serverA, check /var/adm/inetd.sec and see if any services are denied/blocked for serverB.

Regards,
Naveej

[Peter Chang_9]

Dear Naveel,

Only the following is in the /var/adm/inetd.sec file

dtspc allow 127.0.0.1 loopback hwae4640

It is the same on both servers

[Muthukumar_5 · Accepted solution]

Is there anything in /etc/securetty file on serverA.

Another reason may be as,

1. you may try with different user from serverB to another user in server A.

2. remshd daemon may be stopped on server A

hth.

[Peter Chang_9]

Dear Muthukumar,

I checked /etc/securetty file on serverA it contained
only console, I pounded it out, ran inetd -c and it still doesn't work.
Do I need to restart something?

I can use root to remsh from serverB to serverA, but when I use
any other users it doesn't work.

How do I check if the remshd daemon is running or not?

Thx

[Ermin Borovac]

remshd is obviously working, otherwise you wouldn't get error message.

Check /etc/inetd.conf; you should see the line as follows.

shell stream tcp nowait root /usr/lbin/remshd remshd

Make sure there is no '-l' at the end of the line. It would disallow use of .rhosts file for non-privileged users.

[Peter Chang_9]

Dear Ermin Borovac

I have the following line in both servers' /etc/inetd.conf
shell stream tcp6 nowait root /usr/lbin/remshd remshd
no -l was found.

Thx

[Muthukumar_5]

I think the problem is with .rhosts and /etc/hosts.equiv file.

server A:
--/etc/hosts.equiv--
serverB

and vice versa.

.rhosts in root home directory of serverA as,

serverB

and vice versa.

This is a common problem that, user login from one machine to another with different user will make problem as login incorrect.

Check out /etc/hosts.equiv and .rhosts file contents. It will work.

[Muthukumar_5]

You can more understand the problem with hosts.equiv man page available as,

http://www.informatik.uni-frankfurt.de/doc/man/hpux/hosts.equiv.4.html

Read on all EXAMPLES in that.

[Peter Chang_9]

Dear Muthukumar,

There are no entries in /etc/hosts.equiv on both servers.

I have .rhosts in / on both servers.
.rhosts on serverA /
serverB root

.rhosts on serverB /
serverA root

I also have .rhosts in /mnt6/informix on both servers.
.rhosts on serverA /mnt6/informix
serverB informix

.rhosts on serverB /mnt6/informix
serverA informix

I have made sure
serverA's /etc/hosts contains serverB info
and vice versa

thx

[Ermin Borovac]

Is informix account in /etc/passwd or some other repository (NIS, LDAP)?

Anything in /var/adm/syslog/syslog.log?

[Naveej.K.A]

Hi,

Compare /etc/inetd.conf and /etc/services on both servers and check for any differences in the services for remsh and login

Regards,
Naveej

[Peter Chang_9]

Dear Ermin Borovac,

Informix user is in /etc/passwd on both servers.
Its password is not locked (*)

I have watched the /var/adm/syslog/syslog.log on serverA
while trying to remsh serverA ls from serverB. No error
or special message came out. Below is a sample of the
/var/adm/syslog/syslog.log on serverA. I did a rlogin, then
tried remsh from serverB to serverA

May 18 13:14:10 serverA inetd[19287]: login/tcp: Connection from serverB (192.
168.x.x) at Wed May 18 13:14:10 2005
May 18 13:14:23 serverA inetd[19306]: shell/tcp: Connection from serverB (192.
168.x.x) at Wed May 18 13:14:23 2005

Thx

[Ermin Borovac]

Check .rhosts file on serverA. It should be owned by root or informix account. It must not be symbolic link.

[Peter Chang_9]

Dear Naveej,

login is the same in both /etc/services, /etc/inetd.conf
shell is the same in both /etc/services, /etc/inetd.conf
remsh is not found in both /etc/services

thx

[Ermin Borovac]

Also put the following in /etc/syslog.conf

*.debug/var/adm/syslog/debug.log

# kill -HUP `cat /var/run/syslog.pid`

Now check debug.log for additional remshd messages.

[Muthukumar_5]

Problem is because of .rhosts file setup only.

You have configured on both machines to accept remote execution from root to root or informix to informix.

If you want to make change that informix -> root and root -> informix then,

server A

.rhosts of /
serverB informix

.rhosts of informix
serverB root

and vice versa.

If you want to allow all users to access root account on server A then,

.rhosts of /
serverB

That is all.

[Peter Chang_9]

Dear Muthukumar,

The problem I am having with remsh is from informix user to informix user.
I have added serverB root in the .rhosts file in my informix user home directory
on serverA but that didn't work either.

Dear Ermin Borovac,

How can I re-start syslog? I kill its pid.. does it restart automatically?



thx

[Muthukumar_5]

Is informix users home directory NFS mounted?

What is the permission of .rhosts file of informix. It has to be readable by ALL. Else you will get problem.

chmod 644 .rhosts

It will work.

[Muthukumar_5]

For getting additional log, after configuring do as,

# kill -HUP `cat /var/run/syslog.pid`

so that syslogd is asked to reconfigure it's configuration. Check out the syslogd running status with ps -ef | grep syslogd or looking into syslog file.

[Peter Chang_9]

Dear Muthukumar,

I believe informix directory is NFS mounted on serverA,
how can I check to make sure?

I chmod 777 .rhosts file in the informix home directory on serverA,
and it still doesn't work.

ps -ef | grep syslogd didn't return anything, I think I killed off
the process. How can I restart it?


thx

[Muthukumar_5]

Restart syslog as,

/etc/init.d/syslog restart

What is your machine configuration? uname -a of serverA and serverB.

Do one check as,

on every .rhosts file on root user and informix only add remote server name only as,

.rhosts
serverB

.rhosts
serverA

Check this. Is it working or not. It will allow all users to do remsh.

keep user permission and 644 permission on .rhosts file.

P.S: Check this without anyother contents in .rhosts file.

hth.

[Thayanidhi]

Hi,
In hp-ux "/sbin/init.d/syslogd start" to start the syslog deamon.

Immediately after trying the remsh run the below command to find out what user name is passed to ServerA.

# /usr/sbin/acct/fwtmp < /var/adm/btmp

See the last lines. The hostname and user name is logged here. Make sure you have same hostname and username on the .rhosts.

Just a thought.

Regds
TT

[Suraj Singh_1]

Hi,

What is the UID of user "informix" on both machines? The UID's must be same.

Regards

[Peter Chang_9]

Thanks all who have replied to this question.
I found the problem to be the root directory on serverA had different group and permission then serverB.

serverA's ROOT directory
drwxrwx--- 37 root informix 8192

serverB's ROOT directory
drwxr-xr-x 37 root root 8192

I made the changes to have serverA matches serverB and it works.


Thanks all again.