rlogin not happening

[Popy]

Hi all,
I have to nodes in cluster.
in both nodes I made entry of root in /.rhosts
for rlogin service.
I am able to do rlogin from Node A to B, but
from B to A rlogin is not happening.
Do I need to make some other entries other than .rhosts ?
Pls help me ?

Raneesh Vijayan

[Sridhar Bhaskarla]

Hi Raneesh,

You will need to make sure / is infact the home directory of root on Node A. Go to Node A, login as root and do 'cd'. You will have to create the .rhosts file in there.

If that is ok, then I would check how Node B is "appearing" to NodeA. You can find it out very easily through syslog. Run inetd with connection logging and observe the hostname/IP address of Node B.

inetd -l

tail -f /var/adm/syslog/syslog.log

Telnet to node A from node B now and watch the IP/hostname in the syslog.log. Add it to the .rhosts file on nodeA.

Using r-commands is deeded a security risk and I definitely avoid for root. Try openssh product and use public/private key authentication.

-Sri

[Kevin Wright]

you should disable rhosts and use ssh/scp. Anyway, do you have inetd.conf and/or inetd.sec configured to allow rlogin/shell?

[Hoang Chi Cong_1]

Hi.
Have some opinion:
Check again in the hosts file and resolve name was correct.
And check in /etc/services to check again.
You can specify user and server.
For example:
You have Server1 and Server2 and you want to rlogin with the same user like "Raneesh"
In .rhosts file. The format like:

in Server1:

Server2 Raneesh

in Server2:

Server1 Raneesh

Then all restart inetd: inetd -c in both of server.
Make sure about resolve from IP address to name.
Anyway check again in the ined, can follow these steps:
1. Log in as superuser on the console of the system that canâ t be reached remotely.
2. Check that inetd is running:
ps -ef | grep inetd
3. If inetd is not running, start it:
/usr/sbin/inetd
4. If inetd is running and users still cannot rlogin (or remsh or telnet)
the service may be disabled. Check /etc/inetd.conf for the following
lines:
telnet stream tcp nowait root /usr/lbin/telnetd telnetd
login stream tcp nowait root /usr/lbin/rlogind rlogind
shell stream tcp nowait root /usr/lbin/remshd remshd
5. If these lines do not exist, or are commented out (preceded by a pound
sign, #) add them (or remove the pound signs) and restart inetd:
/usr/sbin/inetd -c

Please try and goodluck to you.


Jimker

[Sยภเl Kย๓คг]

Raneesh
in /etc/inetd.conf look for these entries

login stream tcp nowait root /usr/lbin/rlogind rlogind
shell stream tcp nowait root /usr/lbin/remshd remshd
kshell stream tcp nowait root /usr/lbin/remshd remshd -K
klogin stream tcp nowait root /usr/lbin/rlogind rlogind -K

Can u tell what exactlty happens while u run the rlogin command,is it giving connection refused or not authenticating user?

regards
SK

[Anitha_3]

hey Raneesh,

how are u Man !!

i also faced the same problem, what is the both Nodes? is it hp-ux??

just check the host entries and try resolving the two server using nslookup.

there is no other configuration required other than created an .rhosts entries in home directory.

call me if u have any problems.

hope this will help.
Govind.

[Victor BERRIDGE]

Hi Raneesh,
When you say its not happening, what do you mean?
Is it e.g.
toto # rlogin titi -l root >
Password:
login incorrect
...

Which could be you have a /etc/securetty file on your boxes that disables root connections (but not remote shell...)
what happens exactly?

All the best
Victor

[Popy]

Hello Victor/Sunil,

nslookup is resolving the names in both the nodes.
If I say rlogin nodename that session will just hang there.I will have to do a ctrl^C to comeout after that.

Regards
raneesh

[RAC_1]

From B node, telnet to A. Login with root user id.

Now do who -um

What appears in the last column should be there on B node's .rhost file. P ut it that way.

Post

Anil

[Prashant Zanwar_4]

Hi,
Check for inetd.conf for rlogind entry. It has to be as mentioned above..
Also check resolv.conf for namesvrs...and hosts files also. If resolution is correct..check .rhosts, hosts.equiv..files and entries in them...
This shall resolv the problem hopefully..
And I believe you dont have any other software running which controls your inetd.conf...if so you will have to look in that also...Just check...
Thanks
Prashant