"permission denied when rcp-ing with root.

ayeletr · 01-22-2004, 09:38 AM

Hi All,

I am trying to rsh from one linux server to another (both RH 7.3)

1) The /root/.rhosts file exists containing "+" sign. permission 600.
2) I enabled the services under xinetd with "chkconfig rsh on" "chkconfig rexec on" & "chconfig rlogin on".
3) i added the lines "rsh,rlogin,rexec" to /etc/securetty.

I still get "permission denied when rcp-ing with root.

What should i do???

Ayelet

kgm · 01-22-2004, 09:47 AM

Try using "scp" (secure cp) instead.

eg. scp km@tnt:/home/km/filename /tmp or whatever ...

Make sure that '.shosts" exist for both "root" and "km" (in home directories) with the correct permissions.

Hope this helps.

ps. tnt is machine name or can IP addtress of machine.
kgm.

ayeletr · 01-22-2004, 09:49 AM

I cannot work with ssh. i have 35 machines here...
I dont want to install ssh on them.

I want my esh problem to be solved.

ayeletr · 01-22-2004, 10:16 AM

My problem was solved by:editing the file /etc/pam.d/rsh

#%PAM-1.0
# For root login to succeed here with pam_securetty, "rsh" must be
# listed in /etc/securetty.
###auth required /lib/security/pam_nologin.so
auth required /lib/security/pam_securetty.so
###auth required /lib/security/pam_env.so
###auth required /lib/security/pam_rhosts_auth.so
account required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth

Thanks,
Ayelet

daftwight · 01-22-2004, 12:35 PM

ayeletr

your solution fixed mine as well using rh9 and sco openserver.

Thnx a bunch.

dw

german · 03-11-2004, 07:41 PM

now that your problem is solved you'd be very smart to start installing those 35 machines with ssh. My dog knows how to get your login credentials with rsh.

FSS · 11-23-2004, 05:04 AM

Thanx for this working solution. Finally an answer.

Was getting very tired reading the same ssh story over and over again.

We know all bout security, we agree that ssh/scp is better!
But there are more things to consider, not just security.
Otherwise.. we all would drive Volvo's, wouldn't we?

sigsegv · 11-24-2004, 04:48 PM

Quote:

Originally posted by FSS
But there are more things to consider, not just security.

Such as?

Password prompt a problem? Use keys, that's why they're there.

I've got close to 10 times the 35 machines the thread starter says are too many, and SSH/SCP/rsync (-e ssh) have served me well.

What inhibits anyone from using it?