[rhn-users] RE: RHEL4 rlogin problem

[Keith Deterling]

3 things:

(1) add the following to /etc/pam.d/rsh

auth       sufficient   pam_rhosts_auth.so no_hosts_equiv

giving the file as so:

#%PAM-1.0
# For root login to succeed here with pam_securetty, "rlogin" must be
# listed in /etc/securetty.
auth       required     pam_nologin.so
auth       required     pam_securetty.so
auth       required     pam_env.so
auth       sufficient   pam_rhosts_auth.so no_hosts_equiv
auth       required     pam_stack.so service=system-auth
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
session    required     pam_stack.so service=system-auth

(2) If you also want "root" to be able to login via rlogin you also have 
to add the line "rlogin" to /etc/securetty.
This is not necessary for normal users.

(3) Creat a ".rhosts" file in the users home directory, that contains the 
machine name and user that is allowed to rlogin, and make sure it has 
ownership of user only, and permissions of 600 exactly, thus:

# ls -al .rhosts
-rw-------    1 user1     user1          234 Jun 15 17:38 .rhosts


# cat .rhosts
machine1.domain1.com            user1
machine2.domain1.com            user1

Keith Deterling
deterlin at us.ibm.com

Technical Services Professional,
Unix & Intel Server Services - IBM Account
IBM Global Services - Americas Service Delivery ? Server Systems Operation 
Team

Essex, Junction, VT 05242 ? Bldg. 967 ? 1C2009

I am not able
to unfold, how this cautelous enterprise of licensing can be
exempted from the number of vain and impossible attempts.  And he
who were pleasantly disposed could not well avoid to liken it to
the exploit of that gallant man who thought to pound up the crows
by shutting his park gate.

        -- comments from a while back on software licensing .


<<Message: 8
Date: Tue, 5 Jul 2005 16:20:44 +0200
From: Kay Winterhager <Kay.Winterhager at lsg.vanderlande.com>
Subject: [rhn-users] RHEL4 rlogin problem
To: rhn-users at redhat.com
Message-ID:
 
<OF5ED12F9F.FA8233AA-ONC1257035.004E3BCF-C1257035.004ECCC9 at lsg.vanderlande.com>
 
Content-Type: text/plain; charset=US-ASCII

Hi,

I want to use rlogin to connect to another RHEL4 Server, but I get always
the following message:

[root at NODE1 bin]# rlogin NODE2
connect to address 192.168.124.11: Connection refused
Trying krb4 rlogin...
connect to address 192.168.124.11: Connection refused
trying normal rlogin (/usr/bin/rlogin)
NODE2: Connection refused


rsh-0.17-25.3 and rsh-server-0.17-25.3 is installed and service rsh is 
"on"


Could someone tell me what I have to do to make rlogin available!

Thanks
Kay>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/rhn-users/attachments/20050705/8c1c3747/attachment.htm>