rlogin problem

[Din_1]

Dear All,

We have 5 HP UX PA-RISC servers. Name of the servers as follows

DB1
DB2
APP1
APP2
DB Test

In which i can rlogin form DB1 & DB Test to remaining servers. But im not able
to rlogin from DB2 APP1 & APP2

Error message is

rlogin: This program requires super user privileges

Please help!!!

Note: Im login in as a local user and do rlogin in DB1 & DB Test in which i can get access to rlogin

Regards,
Din

[Kapil Jha]

Hi Din,
Have you checked .rhosts file of the user
through which u tryin to do rlogin.
you may also check /etc/hosts.allow.
Hope this would help.
Kapil

[Sandy Chen]

Hi,

Another addition, your /etc/hosts should contain the other 4 hosts if you wanted to do rlogin between them.

Regards,
Sandy

[Din_1]

Hi Sandy & Kapil,

I have above mentioed entries in my /etc/hosts,and .rhosts file in users home directory. But still im getting the error. Thank you very much for your reply.

Regards,
Din

[Steven Schweda · Accepted solution]

Check the ownership and permissions on the
rlogin program?

Around here:

dy # ls -l /usr/bin/rlogin
-r-sr-xr-x 1 root bin 40960 Sep 20 2006 /usr/bin/rlogin

If I remove the setuid bit, it fails as you
describe:

dy # cp /usr/bin/rlogin /usr/bin/rloginX
dy # chmod 555 /usr/bin/rloginX

Now, as a non-root user, with the normal
permissions:

dy $ /usr/bin/rlogin alp


I'm ALP. Who are you?

Username: [...]


But without the setuid bit:

dy $ /usr/bin/rloginX alp
rlogin: This program requires super user privileges

Not being owned by root could have a similar
effect.

Apparently, the message means what it says.

[Kapil Jha]

Thanks very interesting Stevan....
i never saw that....can you please explain a bit why it is happening like this......
when other have execute permission in your example
-r-sr-xr-x
BR,
Kapil

[Kapil Jha]

Thats very interesting Stevan....
i never saw that....can you please explain a bit why it is happening like this......
when other have execute permission in your example
-r-sr-xr-x
BR,
Kapil

[Steven Schweda]

> [...] can you please explain a bit why it
> is happening like this......

_Is_ the ownership or permissions of your
rlogin program wrong (on the systems where
you see the problem)? (I showed you mine,
...)

If so, is your question, "How did it/they get
to be wrong?"?

I can't know, I can only guess.

Possibly more important, if the attributes of
_this_ program are bad, how many other
programs are also damaged?

"man swverify", and look for
"check_permissions"?

[whiteknight]

Din,

check permission as well.
Here are two ways to address this issue:

1. Change the permissions of /home to drwxr-xr-x (755).

2. Change the ownership of /home to root:users.

With permissions set to 755, all users have read access to the directory,
so the connection succeeds. Similarly, with the ownership changed to
"group = users", again the connection succeeds because "users" is the
primary group of user1 and the permissions are set to allow "group"
access (i.e. 750).

WK

[Din_1]

Thank you very much Mr.Steven Schweda. Its really worked and solved my problem. Now i can rlogin from any of the 5 server. Thank you once again for your support.

Thank you to the team whoever replied to my thread.

Regards,
Din