trying to remsh from hpux to redhat

[Matt Shaffer_1]

I am trying to do remsh from an hpux box to a redhat box but I am being prompted for a password. I have edited /etc/hosts, hosts.allow, hosts.equiv, $HOME/.rhosts and restarted xinetd but I am still being asked for a password. What am I missing? Thanks

[Stuart Browne]

One of two things with the info you've given.

1) The permssions on $HOME/.rhosts isn't 0600

2) you're trying to 'remsh' as the 'root' user. RedHat boxes (by default) deny 'rsh' access for the root user.

[Sivakumar TS]

Dear Matt,

Try creating a normal user in the hpux and redhat as well.

create a .rhosts file with hpux machine's hostname in the redhat machine.

login to hpux as the new user.

now try to do remsh

With Regards,

Siva.

[Vitaly Karasik_1 · Accepted solution]

in order to allow root's remsh, add "rsh" line into /etc/securetty file.
BTW, Linux doesn't allow "+" in .rhosts file.

[Muthukumar_5]

Add remsh, rexec and rsh users in /etc/securetty file. It is needed when doing remsh from hpux box.

--
Muthu

[Matt Shaffer_1]

I should have mentioned that this is a non root user. I will double check my work now.

[Steven E. Protter]

Shalom Matt,

Is NIS or some other configuration involved on either end?

Also this problem points to an issue in one of the configuration files mentioned by you.

tail -f /var/log/messages

Does it accept a password if input?

SEP

[Vitaly Karasik_1]

1) try to rsh from localhost - does it work?
2) can you send us your .rhosts and remsh command you use?

[Matt Shaffer_1]

It was the permissions on $HOME/.rhosts. I had the perms set to 664 and had to be 644. So simple that I over-looked it.

[Vitaly Karasik_1]

Yes, linux is too paranoid sometimes...

[Stuart Browne]

Not really.

Think about it. 0644 means that anybody knows what hosts that user can 'remsh' from without challenge. If said user has the ability to create an account on one of those boxes, it's easy to get in.

Further to that, 0664 means that not only can they see what other hosts they can 'remsh' from, but if they are in the same *group* as the target user, they can add *ANY ARBITARY HOST* to that list.

As I said in my first post, make it 0600. Only the end user needs to know what's in it.

[Matt Shaffer_1]

wrong perms on .rhosts file.