SUMMARY: Solaris 10 rsh problem

From: Donovan, Jeffrey \(Jeff\), WCS (jmd@att.com)
Date: Wed Mar 01 2006 - 12:53:21 EST


SUMMARY:

I gave in and called Sun and we figured out that the CIC hardening
document for Solaris 10 (which I followed) takes the following line out
of pam.conf:

rlogin auth sufficient pam_rhosts_auth.so.1

Added this back and now it works without being prompted for a password.

Thanks to those who offered other solutions.

________________________________

From: Donovan, Jeffrey (Jeff), WCS
Sent: Wednesday, March 01, 2006 10:52 AM
To: 'sunmanagers@sunmanagers.org'
Subject: Solaris 10 rsh problem

Hi all,

I've set up rsh between servers before in Solaris 8 with no problem.
Although I don't want to open it in Solaris 10, some developers need to
do some transgression testing so I had to turn the services on. With the
services on I now get a password prompt even though I have the .rhosts
and /etc/hosts.equiv files configured with a + allowing anyone to
connect, this also didn't work with the hostname/username in them. I
changed permissions so that they are owned by root and 600. Am I missing
something, is something new in Solaris 10? Am I missing another service
that should be on? This is what I turned on:

svcadm enable svc:/network/login:rlogin

svcadm enable svc:/network/shell:default

svcadm enable svc:/network/login:rlogin

Stupid problems like this waste a lot of my time.

Thanks for the assistance.

Jeff Donovan

The new at&t
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:39:10 EDT