On Sun Jun 18 2000 at 20:29, Sangohn Christian wrote:
> From one of my Linux boxes I can only make a rsh and a rlogin as
> NON root. Why?
(I assume that /root/.rhosts is correctly set up and is chmod 600).
It is probably configured to deny root access by default (like
telnet).
See what this tells you about what sort of authorisation settings
are configured for it.
cat /etc/pam.d/rsh
If you change anything, be careful. For more details about how PAM
works, check out the documentation. (One thing that would be easy
to change that might make this work is /etc/nologin).
On a box that I have root access working (for doing network backups
using dump - it uses rsh to call rmt), /etc/pam.d/rsh contains the
following:
#%PAM-1.0
auth required /lib/security/pam_rhosts_auth.so
auth required /lib/security/pam_nologin.so
account required /lib/security/pam_pwdb.so
session required /lib/security/pam_pwdb.so
If you don't really need rsh, then get don't use it -- it is a
security nightmare. Much better and much more secure to use ssh, it
does what rsh can do, and a hell of a lot more besides.
Cheers
Tony
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]