Re: rlogin

From: Skot (skot_at_canada.com)
Date: 06/20/03 

Date: Fri, 20 Jun 2003 10:44:27 GMT

Brian K. White wrote:

> On Thu, 19 Jun 2003 22:02:37 +0000, Skot wrote:
>
>
>>Never mind, I got it, seems it's just a bit more finicky then 5.0.5, which
>>is a good thing. Now /.rhosts file needs to have "otherhost root" as an
>>entry, I only had "otherhost".
>>
>>>
>>>I have this new OSR5.0.7 machine, on a local network, and I need another
>>>old OSR5.0.5 machine to be able to use remote commands as root, but when
>>>I do it asks for a password.
>>>
>>>rlogin and rcp work, with out passwords, for regualar users, what do I
>>>need to change to allow root from trusted hosts to use rcp?
>>>
>>>root's home directory, on both machines, have valid .rhosts files with
>>>perms set to 0600, and /etc/hosts.equiv also, it all works fine from 2
>>>5.0.5 machines. What could I be doing wrong?
>>>
>
> It works for me with just hostnames in /.rhosts between a 5.0.7 and 5.0.5
> machine. I have been using rlogin and rcp a lot already, and I just tried
> rcmd on both machines.

Both ways as root?

I also noticed it works the same way on the newer Linux boxes
Linux->OSR5.0.5 OK OSR5.0.5->Linux NFG without username in /root/.rhosts
file. man file says it can use the username in there as well, but it
doesn't seem to care for regualr users, only root. Beats me.

> if the files you list are good then that leaves other files which affect
> them,
>
> /etc/hosts
> /etc/resolv.conf

No, because it's works fine for normal users, both ways, only root needs
the change to /.rhosts

normal user .rhosts file works fine:
localhost
servera
serverb

root's .rhosts file must be like so:
localhost root
servera root
serverb root

And yes, I've tryed with all possible resolutions hostname,
hostname.domain and IP addresses, yet the OS reolves each way even reverse.

unless there is some other config that I just haven't found yet.

Maybe this line in the man file has something to do with it, I don't
quite understand what it means "not an individual user":

In the special case when the
    user is not an individual user then only the .rhosts file in
    root's home directory is checked.

Relevant Pages

  • [HPADM] RE: -SUMMARY- root login with remsh and securetty
    ... that you just need to put an entry in root's .rhosts file as follows: ... So if you put into the root .rhosts file JUST the single line ... then THAT machine can use "remsh" and "rcp", ...
    (HP-UX-Admin)
  • Re: rlogin
    ... >> just tried rcmd on both machines. ... > Both ways as root? ... localhost ...
    (comp.unix.sco.misc)
  • Re: rsh --Invalid ID
    ... > I have my host name in the .rhosts file of root, ... Are you trying to rsh as root? ... reasons. ...
    (comp.security.unix)
  • prevent user to delete files in its own directory
    ... I want to create the .rhosts file in all users home ... directory with permission to root only and prevent the users from ... delete or rename those files. ...
    (comp.unix.misc)