SUMMARY: Solaris 10 rsh problem

SUMMARY:



I gave in and called Sun and we figured out  that the CIC hardening
document for Solaris 10 (which I followed) takes the following line out
of pam.conf:



rlogin  auth sufficient         pam_rhosts_auth.so.1



Added this back and now it works without being prompted for a password.



Thanks to those who offered other solutions.



________________________________

From: Donovan, Jeffrey (Jeff), WCS
Sent: Wednesday, March 01, 2006 10:52 AM
To: 'sunmanagers@sunmanagers.org'
Subject: Solaris 10 rsh problem



Hi all,



I've set up rsh between servers before in Solaris 8 with no problem.
Although I don't want to open it in Solaris 10, some developers need to
do some transgression testing so I had to turn the services on. With the
services on I now get a password prompt even though I have the .rhosts
and /etc/hosts.equiv files configured with a + allowing anyone to
connect, this also didn't work with the hostname/username in them. I
changed permissions so that they are owned by root and 600. Am I missing
something, is something new in Solaris 10? Am I missing another service
that should be on? This is what I turned on:



svcadm enable svc:/network/login:rlogin

svcadm enable svc:/network/shell:default

svcadm enable svc:/network/login:rlogin





Stupid problems like this waste a lot of my time.



Thanks for the assistance.



Jeff Donovan

The new at&t
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers