setup automatic login for rsh/rexec

[ecorban]

Hi

How do i setup an linux host running AS2.1 and AS3.0 so as i dont have to be prompted for the
root password exery time i login. I already
setup the /.rhosts file but still get prompted
for a root password once i remsh from an hpux host. I need to setup this so as to run hazard on linux hosts........

[Stuart Browne]

This is dis-allowed for the 'root' user by default on most Linux boxes.

To get around it, make an entry to '/etc/securetty' that says 'rsh', and give it another shot.

If that doesn't work, then some error messages from the log files will be needed to see why it's being rejected.

[Ernie Burns]

I have attached some excerpts from some HP documents that may be of use. We had to address this issue when setting up a Data Protector client on our Linux boxes. We were using RH Linux 7.1.

Hope this helps.

[Bill Thorsteinson]

Use ssh with private keys in the authorized file. See openssh.org.

rsh/rexec is a known security hole. If you insist on using it check the docs for the configuration files and use tcpwrappers to limit access. I believe the config file is .rhosts.

[ecorban]

This is the instructions that i followed
and still get prompted for the password when i remsh (hpux host) to linux host. so whats going wrong or what am i doing incorrectly?
BTW, the previous attachemnt in the message didnt solve the issue either ?

Hash out entry in /etc/pam.d/rsh for pam_rhosts_auth
Same for /etc/pam.d/rlogin
Add pts0, pts1, rsh, rlogin,rexec to /etc/securetty
vi /root/.rhosts add +
Did the same for /etc/hosts.equiv
Add ALL + ALL to /etc/hosts.allow
Ensure disable=no in /etc/xinetd.d/rsh file
Do service xinetd -restart

[Steven E. Protter]

This is so insecure it makes me shake.

Check the permissions on the following files:

.rhosts
hosts.allow
hosts.equiv

hosts.equiv could be interfering with this operation.

SEP

[dirk dierickx]

please for the sake of god use SSH!

[ecorban]

The reason why i aint bothered with security is there test machines. hp requires a hazard test and it requires auto login to the host.

BTW, all the suggestions still dont fix the problem. Now, that should make yee shake further!!

[Stuart Browne]

Oh, one thing I didn't notice until just then.. The '.rhosts' file goes in the affected user's home directory, i.e. /root/, not /.