tcpwrappers and rcp

[Geetha Alagappan]

Hi,
I have a problem with tcpwrappers and rcp.
I have installed the wrappers on 1 of our HP9000
K570 servers. rcp does not work if you try rcp to the server with tcpwrappers installed from a HP9000 that does not have the wrappers installed.

Example:
RTS2: /tmp # rcp mgt2:/tmp/sssot/testrcp.txt . (WORKS) TCP WRAPPERS Installed

MGT2: /tmp/sssot # rcp testrcp.txt rts2:/tmp/rcp.txt (DOESN'T WORK) No TCP Wrappers installed
20-Hello root@mgt2.xxx.com ( This is from the tcp wrapper banner)

I have verified that the tcp wrappers are causing the problem by commenting out the entry in the inetd.conf
shell stream tcp nowait root /usr/lbin/remshd remshd
#shell stream tcp nowait root /usr/lbin/tcpd remshd

Once I did this, rcp works correctly. I would appreciate any advice.

Thanks
Alice

[Brian Hackley]

Alice,

I was curious to find out if you can rsh or remsh to the HP box that has wrappers on it with and without the "shell" entry being commented out.

Also might want to consider checking the inetd patch and r-commands patch level on the target HP box to see if they need to be updated.

I know this doesn't help debug TCP wrapper-specific issues. However, one thing you can try is to put inetd into debug mode on the target box (inetd -b), then do the remsh to it that fails, then turn off inetd debug mode with another inetd -b. The debug info will flood into /var/adm/syslog/syslog.log.

Hope this helps a little,

-> Brian Hackley

[Geetha Alagappan]

Brian,

I think it is the banners that is causing the problem.
After disabling the banners in the /etc/hosts.allow file, I was able to rcp to the target host.

Here are your responses:
1. I am able to remsh to the HP box that has wrappers on it with and without the "shell" entry being commented out.

2. We have the latest patch for r-commands
PHNE_17028 1.0 r-commands cumulative mega-patch
PHNE_17030 1.0 r-commands cumulative mega-patch

3. I will attach the output from syslog with inetd -b
turned on.

Thanks
Alice