rsh deined

[Tonatiuh]

[root@RAC2 root]# rsh 1.1.1.1 pwd
Permission denied.

What must I configure to perform this task?

[Steven E. Protter]

Take a look at the .rhosts file on the root home diredctory of the 1.1.1.1 machine, make sure it allows appropriate access.

Consider replacing the insecure rsh with openssh, which ships on most modern Linux distributions.

Attaching a doc for SAFE password free ssh instead of rsh

SEO

[Tonatiuh]

>Take a look at the .rhosts file on the
>root home diredctory of the 1.1.1.1
>machine, make sure it allows appropriate
>access.

I do not have a file named /root/.rhosts

Should I create it? what should it be the content of that file?

>Consider replacing the insecure rsh with
>openssh, which ships on most modern Linux
>distributions.

Thanks for the tip, but this is for an Oracle RAC interconnect and this private network is completely separated from the rest of the network nor internet.

[Jan Sladky]

example of .rhosts

smp3-1m root
smp3-1 root
pluto smsadmin
metis smsadmin
sce3 smsadmin
sce4 smsadmin

where first column is box (if name must be in /etc/hosts or DNS, IP is also allowed), second one trusted user

another way is use /etc/hots.equiv containing trasted box only, name or IP

(After finishing don't forget assign the points, you are doing it very rarely, it is good for all forumers ;-)

[Vitaly Karasik_1]

- start rsh on remote linux box
- add client hostname to .rhosts
- if we speak about root user - add "rsh" line to /etc/securetty file

[Tonatiuh]

I have tried with hosts.equiv and with .rhosts but the problem is still exactly in the same way.

[root@RAC2 root]# cat .rhosts
Nodo1 oracle
Nodo2 oracle
RAC1 oracle
RAC2 oracle
[root@RAC2 root]# cat /etc/hosts.equiv
Nodo1 oracle
Nodo2 oracle
RAC1 oracle
RAC2 oracle
[root@RAC2 root]# cat /etc/hosts
172.16.11.27 RAC1
1.1.1.2 Nodo2
1.1.1.1 Nodo1
172.16.11.28 RAC2
# Do not remove the following line, or various programs
# that require network functionality will fail.

Jan:
>(After finishing don't forget assign the
>points, you are doing it very rarely, it
>is good for all forumers ;-)

I think it is not good to assign points to replays which have not given me a solution to my problem, because all of that would be assigned with zero ('0'). I prefer to wait until the issue is solved and then assign points the the replays that pointed me to the solution.

THANKS a lot in advance!

[Vitaly Karasik_1 · Accepted solution]

>[root@RAC2 root]# cat .rhosts
>Nodo1 oracle

as far as I understand, you should allow rlogin for root user, not oracle.

so I suggest to add to /root/.rhosts "nodo1" line and try to run from nodo1 as root:

rsh rac2 date

[dirk dierickx]

do you need rsh? perhaps you could achieve the same result with ssh, which is much more secure.

[Tonatiuh]

Does the command rcp still preserve the same name to be called (rcp)? this is because I am installing an Oracle RAC and I guess Oracle calls the command as rcp.

[Vitaly Karasik_1]

no, in ssh suite there is "scp" instead of "rcp".

[Muthukumar_5]

You can use the following steps to make rsh to work as,

1. Check for rsh package using
# rpm -qa | grep rsh
following should be present.

rsh-0.17-14
rsh-server-0.17-14

If rsh-server package is not present, install the package.

2. Check rsh configuration using
# chkconfig --list rsh

If rsh is OFF, then make it ON as
# chkconfig rsh on

3. Create a file .rhosts containing '+' as its content in the root directory. ( Specify your own remote shell configuration with hostname or ip-address, username )

4. Check the content of the file /etc/securetty for rsh, rexec, rlogin. If it does not contain them, add them.

5. Comment the line "auth required pam_rhosts_auth.so" in the file /etc/pam.d/rsh.

6. Now you can execute any command on the remote machine using rsh -l

HTH.