remshd: Login incorrect - AARRGGHH! 2

[desktophero]

I have set up the /etc/hosts.equiv and /home/admin/.rhosts file identically on 3 HP-UX boxes. However, I am only able to remsh from one of these boxes to the other 2. On a second box, I can run remsh on 1 other box. I can't get them all of them to allow this access.

i checked /etc/inetd.conf and /etc/services and they are all the same.

I am running HP-UX 10.20.

All of the ids and pwds are the same.

Has anyone run into this type of situation? Does anyone have any suggestions?

Thanks in advance

 

[Antistatic]

Have you checked your /.rhosts file??? According to my notes if you log in as root, you will want to have this file configured the same as /etc/hosts.equiv. HOWEVER this will open up a huge hole in your network security allowing any superuser on any system to log in remotely without the root password.

 

[desktophero]

Actually, on Hp-UX 10.20 there is a pwd check - sort of - on the remote machine. When remshd runs ( the remote shell daemon ) it performs a check on the passwd file, does a chdir. If the account on the remote system is password protected (AS IT SHOULD BE!!!) and the passwords are not the same for both systems, then you will get a remshd: Login incorrect - as I am. So there is some security there.

I actually figured out the problem. There are times when you make a TCP/IP call (i.e. telnet) to another host and what you think is your local host name, may be resolved differently. When I tried to connect to system1 from system2, the name entry of my local system in the hosts file was epica1 ( ... or something). That is where the connection was being originated from, not system1. So, on system2, I needed to added epica1 to the hosts.equiv system.

 

[greenpau]

As desktophero suggests, when you telnet or rlogin or login to a host from a remote connection, the system will do a reverse lookup of the originating host. If the responce doesn't match what is in your 1./etc/hosts 2.$HOME/.rhosts 3./etc/hosts.equiv it will prompt you for a password.

To do a reverse lookup:

1. Telnet into the box using any of the above methods.
2. who -R am i

This will tell you where you came from as identified by the target host.