system remote login

[O'lnes]

I have problem in run the remote login, the below is the problem:

From Host_A run
remsh Host_B -l testuser touch /tmp/file -- > successful to create file
remsh Host_C -l testuser touch /tmp/file -- > remshd: Login incorrect
remsh host_A -l testuser touch /tmp/file -- > remshd: Login incorrect
all hosts host_A ,host_B & host_C has set the file ~testuser/.rhosts as :
+ testuser
+ testuser
+ testuser

Can suggest what this happen? thx.

[Clemens van Everdingen]

Hi,

Idea !

Check to see whether the remsh entry in /etc/inetd.conf contains the -l
option (for example):

shell stream tcp nowait root /usr/lbin/remshd remshd -l

If so, then remove the -l entry (for example):

shell stream tcp nowait root /usr/lbin/remshd remshd

and tell inetd to reread the /etc/inetd.conf file:

inetd -c

C.

[Paula J Frazer-Campbell]

HI
Check your routing to the failing hosts.


Paula

[U.SivaKumar_2]

Hi,
Any errors in syslog file ?

regards,
U.SivaKumar

[U.SivaKumar_2 · Accepted solution]

Hi,

Are you running remsh as testuser in the localmachine ?. you should have same user listed .rhosts of remote hosts in local machine also.

To override this use -l option for remshdshell stream tcp nowait root /usr/lbin/remshd remshd -l

regards,
U.SivaKumar

[O'lnes]

hi Clemens van Everdingen,

I checked the file , on my setting, it is "-K" not "-l", what should i do then? Thx.

[Clemens van Everdingen]

Hi,

If the -K is not on the other working system, I would remove it and try again.
In man remsh I can not find a -K option.
See man remsh for the -l option and others.

C.

[Darrell Allen]

Verify testuser owns the .rhosts file and the permissions are 600.

Darrell

[O'lnes]

Hi ,

Bost host_A and host_B are "-K" in /etc/inetd.conf

"kshell stream tcp nowait root /usr/lbin/remshd remshd -K"

I tried to remove this , but still not work, can someone suggest? Thx.

[Clemens van Everdingen]

Hi,

My line in hp-ux 11.00 is:

shell stream tcp nowait root /usr/lbin/remshd remshd

How is your line on the working system ?

C.

[Clemens van Everdingen]

Hi,

Forgot to ask:

Do you have a inetd.sec and a hosts.equiv file?
And what is in it ?

Did you check the permissions of the .rhosts file ?

C.

[U.SivaKumar_2]

Hi,
simply put this line in /etc/inetd.conf
shell stream tcp nowait root /usr/lbin/remshd remshd -l

#inetd -c

This should work.


kshell and -K option is for KERBEROS AUTHENTICATION>

Regards,
U.SivaKumar

[O'lnes]

Hi
Clemens van Everdingen ,

1. I have add host_C to host_A's host.equiv file,

2. part of inetd.sec is

ftp allow
telnet allow
login allow
shell allow
exec allow
auth allow
printer allow
daytime allow
echo allow
discard allow
chargen allow
kshell allow
klogin allow
time deny


hi
U.SivaKumar,

I add the line in both hosts, but it still not wrok.

[O'lnes]

hi Clemens van Everdingen,

I tried to add the the host name of host_C to host_A's hosts.equiv file and , but still not work.

[Darrell Allen]

Perhaps it's a host name resolution problem. Rlogin from hostA to hostB. Do "who am i -T" and note the name/IP address of where you logged in from. That is what needs to be in .rhosts.

Darrell

[O'lnes]

I sure the .rhosts setting is OK, can somesome suggest what this happen?
Thx.

[U.SivaKumar_2]

Hi,
olnes.
Do you have user testuser at the local server also. If no create it in the local server. Then
try again remsh.


regards,
U.SivaKumar

[RAC_1]

You checked remshd -l.

telnet to respective machines and do who -u.

The machine name or ip in the last column should be there in your host file and accordingly in your .rhosts files.

Regards,

[Matt Walker_1]

Before you go through and make all kinds of changes, you might want to perform this simple task first...

Check the permissions on the .rhosts files.
If the OWNER of the .rhosts file doesn't have READ access to the file then the "remsh" command will fail.

Note: Considering the fact that you are getting the message "remshd: Login incorrect"
should automatically tell you that the daemon on the remote system is running. If the service was unavailable you will get a registration error...

[Telia BackOffice]

Do you have a firewall betwine the servers or and IP router ?

else you should see messages with failed login.

the + should be in the .rhosts file owned by the user (in user home dir with read permissions). Another sollution could be the system wide:
/etc/host.equiv
here you could add all the servers witout a +.

BR,
Jannik

[Darrell Allen]

Hi O'lnes,

We need more feedback from you to help diagnose your problem. For instance, you reply that "I sure the .rhosts setting is OK". It would help us to see the output of:
rlogin host_C
who am i -T
ll .rhosts
cat .rhosts

If you are using /etc/hosts.equiv instead of the user's .rhosts file, show us:
rlogin host_C
who am i -T
ll /etc/hosts.equiv
cat /etc/hosts.equiv

In one post you say you added "host_C to host_A's host.equiv file". If you are connecting from host_A to host_C, you must have host_A in the hosts.equiv file (note the file name is hosts.equiv, not host.equiv) OR in the user's .rhosts file ON HOST_C.

Have you verified what U.SivaKumar has told you? You need to do the following on host_C:
verify /etc/inetd.conf contains:
shell stream tcp nowait root /usr/lbin/remshd remshd -l
inetd -c

Lastly, if you have found the answer, please post a reply in this thread telling what the answer was. Also assign points to each reply based on how helpful each was. This will help other people in the future who have the same problem you are having.

Thanks,
Darrell