Re: Debugging rsh

2004-01-21 Thread David Z Maze
[EMAIL PROTECTED] writes:

 I am trying to rsh to my server. I am using kerberos authentication. I
 believe I have configured everything correctly, but rsh simply
 complains: hostname: Connection refused.

That message generally implies that nothing at all is listening for an
rsh server, at least on the port the rsh client expects.

 I checked my inetd.conf.

What did you find?  Peeking in /etc/services, it looks like krsh is
probably running on the 'kshell' port (TCP port 544), not the normal
'shell' port (TCP port 514), so you might check that you have an rshd
configured to listen on the right port.

Also, there's the usual checks for Kerberized services: do you have a
TGT?  If you do, do you get a service ticket (for krb5,
host/remote.host.name; for krb4, rcmd.remote.host.name)?  (I'd guess
yes and no from the symptom, but it can't hurt to check.)  Which
rsh server are you actually using?

I think even around here, the standard for remote shell access is
moving to ssh over Kerberized rsh and friends.  You can configure ssh
to do Kerberos authentication, and tunnel arbitrary things (including
X programs) over the ssh connection.

-- 
David Maze [EMAIL PROTECTED]  http://people.debian.org/~dmaze/
   MIT Athena Frequently Asked Question #578: Why can't I use RSA
   authentication to connecto the dialup servers?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Debugging rsh

2004-01-17 Thread ms419
I am trying to rsh to my server. I am using kerberos authentication. I 
believe I have configured everything correctly, but rsh simply 
complains: hostname: Connection refused. I checked my inetd.conf. 
Unfortunately, I can't figure out how to debug rsh. Even using the -d 
option, nothing is printed either to stdout or the logs.

How can I debug rsh to determine why I can't connect?

Thanks,

Jack

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Debugging rsh

2004-01-17 Thread Micha Feigin
On Sat, Jan 17, 2004 at 03:42:34AM -0800, [EMAIL PROTECTED] wrote:
 I am trying to rsh to my server. I am using kerberos authentication. I 
 believe I have configured everything correctly, but rsh simply 
 complains: hostname: Connection refused. I checked my inetd.conf. 
 Unfortunately, I can't figure out how to debug rsh. Even using the -d 
 option, nothing is printed either to stdout or the logs.
 
 How can I debug rsh to determine why I can't connect?
 

Not rsh related but things a few tools that can help diagnose a lot of
network related problems:

hostname and dig -x to check for dns related problems
tcpdump or the graphical ethereal to look at network traffic to see
what is actually going on.
tracerout and ping to check for remote machines and bottle necks/broken
connections.
nmap (remote checking) and netstat -tulpen (local) to see what ports
are actually open.

From the error message it seems that either a firewall is blocking you,
nothing is willing to accept you rsh connection or you are using a
wrong username/password or mis-configured rhost (don't know much about
that last one, sorry).

If you have physical access to the remote machine (or someone you
know), you can start by trying to rsh from the machine to itself.

 Thanks,
 
 Jack
 
 
 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
 with a subject of unsubscribe. Trouble? Contact 
 [EMAIL PROTECTED]
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]