RSH connect to address 192.168.1.xxx port 544: Connection refused Permission denied
 

I am installing some software that uses a MPI to pass parts of programs to cluster computers. This requires RSH to run the commands on the compute nodes.

I am running CENTOS 5

uname -a
Linux 2.6.18-92.el5 #1 SMP Tue Jun 10 18:51:06 EDT 2008 x86_64 x86_64 x86_64 GNU/Linux

I have setup IP MASQ so the head node routs all the traffic.

iptables -L

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

I know that this is working.

cat securetty

tty11
rsh
rlogin
rexec

xinetd.d/rsh
disable = no
socket_type = stream
wait = no
user = root
log_on_success += USERID
log_on_failure += USERID
server = /usr/sbin/in.rshd
}
xinetd.d/rlogin

service login
{
socket_type = stream
wait = no
user = root
log_on_success += USERID
log_on_failure += USERID
server = /usr/sbin/in.rlogind
disable = no

xinetd/rexec

socket_type = stream
wait = no
user = root
log_on_success += USERID
log_on_failure += USERID
server = /usr/sbin/in.rexecd
disable = no
chkconfig --list |grep rsh
rsh: on

I know that this is probably something that I am doing wrong any help would be apreciated.

Thank you
Mike

Your port probably is not open for incoming connections.

Thank you for the reply
I have confirmed that the ports are open and that I can contact the port via telnet.

What about the hosts.equiv? should I be putting machines and users in this file?

I got this to work. It has taken a few days for me to think about posting this so sorry for the delay. The issue was with authentication, if you go into the /etc/pam.d/rsh file and move rlogin and rsh to the top and make it look like this it will work just fine.
# For root login to succeed here with pam_securetty, "rsh" must be
# listed in /etc/securetty.
auth required pam_nologin.so
auth required pam_securetty.so
auth required pam_env.so
auth required pam_rhosts_auth.so
account include system-auth
session optional pam_keyinit.so force revoke
session include system-auth

Thank you for the input.

Mike

Hi,
Using your post. I was able to enable rlogin. However, rsh is still not working. Any pointers will be appreciated...

Did you get my email? Make sure that you have the hosts.equiv and the .rhosts file created the contents of these file need to be +host +user. Other options are available if you have any more questions please let me know.

Thank you
Mike

Can you please post your /etc/pam.d/rsh
 

May be my /etc/pam.d/rsh file is messed up. Is it different from /etc/pam.d/rlogin file?

Can you please post your /etc/pam.d/rsh ?

Got it working. Thank you for your help and tips. I am thanking you officially as well.

>Thank you did you get VNC server running?

Yes, I finally got vino (vncserver) working. As root:
yum install vino

sudo reboot

Then enable vncserver service from:
System ---> Administration ---> Services ---> vncserver
"Enable"

After it is enabled, start the the service.
System ---> Administration ---> Services ---> vncserver
"Start"

It may say "refreshing service" but eventually gets done.

Reboot, it should have started automatically.

As a normal user, configure vncserver from:
System ---> Preferences ---> Internet and Network ---> Remote Desktop

You select the options. You can also, switch to the "Advanced" tab and change the port for the service.