News Group Posts

rlogin

From: "Stuart J. Browne" <stuart@promed.com.au>
Subject: Re: rlogind: Remote login has been disabled by the administrator.
Date: Fri, 15 Jun 2001 13:59:48 +1000
References: <9gbs6u$n7s$1@perki.connect.com.au>
<20010614221944.24940@tegan.com> 


"Tom Parsons" <cis@tegan.com> wrote in message
news:20010614221944.24940@tegan.com...
> Stuart J. Browne enscribed:
> | Hi,
> |
> | Now.  I've tried these with and with the 'user' name in the /.rhosts, to
no
> | effect.  Given the frustration of the password asking, I added '-X' to
> | /etc/inetd.conf for the 'rlogind'.  After that, it continually spits out
> | "rlogind: Remote login has been disabled by the administrator.".
> |
>
> When using .rhosts, correct permissions are essential and you don't
> mention what you are using.  They *must* be at least 600 and in this
> instance, owned by root.
>
> The format of your /etc/hosts files are inconsistent between machines
> and do not follow the format in the man pages.  Neither does .rhosts.
>
> Make /etc/hosts read:
>
>  192.168.1.111   qdilh   qdilh.qdiagnostic.com.au
>  192.168.1.110   qdidrp  qdidrp.qdiagnostic.com.au qdilc
>
> The second field of /etc/hosts is the output of uname -n.
>
> Change the .rhosts files to have the correct ownership, permissions
> and to contain these entries
>
> on qdilh:
> qdidrp
>
> on qdidrp
> qdilh

...

Had a big long post written.. Before going back to basics, and starting from
scratch...

Bugger..

Had tried so many things before changing permissions to 600 (as per man
page), that I forgot to try without the 'user' entries on the line again.  I
had mis-interpreted the 'man rhosts' page.  The "host1 user1" format is
valid for /etc/hosts.equiv however.

re-read rlogind man page, and it states (pretty obviously):

-X      Refuse service and print the message:

             rlogind: Authentication is required on host: hostname

It's amazing what a lunch break and a game of pool provides in terms of
clarity of thought..

(note: little bug in rlogind.. -X doesn't actually say 'on host:
<hostname>'.. just says it's disabled)..

Anyway.. just a little rant:

The hosts entry as it stands works perfectly well.  Assuming you use the
'first entry' on the hosts line, it cares little whether it's the machine
name, a FQDN, or some garbage.  The Domain name there is to allow for the
DNS-less environment the server is operating in to send/receive SMTP based
mail without complaining.  Sendmail and the OServiceSwitchFile directive
need that first on the line (if the file says "hosts files") we've found.



Thanks tom.

bkx

Comments?

Jump to Comments

Many of the products and books I review are things I purchased for my own use. Some were given to me specifically for the purpose of reviewing them. I resell or can earn commissions from the sale of some of these items. Links within these pages may be affiliate links that pay me for referring you to them. That's mostly insignificant amounts of money; whenever it is not I have made my relationship plain. I also may own stock in companies mentioned here. If you have any question, please do feel free to contact me.

Specific links that take you to pages that allow you to purchase the item I reviewed are very likely to pay me a commission. Many of the books I review were given to me by the publishers specifically for the purpose of writing a review. These gifts and referral fees do not affect my opinions; I often give bad reviews anyway.

We use Google third-party advertising companies to serve ads when you visit our website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you. If you would like more information about this practice and to know your choices about not having this information used by these companies, click here.