pam_rhost Re: rshd on 5.0-DP1

2002-04-12 Thread Danny Braniss

for what it's worth, i've set up a pam_rhost:

ftp://ftp.cs.huji.ac.il/users/danny/pam_rhost



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



Re: rshd on 5.0-DP1

2002-04-11 Thread Danny Braniss

i went down the same road, rlogin works fine, but rshd does not work, for
anybody - including root. my guess the problem is in the PAM stuff.

danny



To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message



rshd on 5.0-DP1

2002-04-10 Thread Orrie


In giving the iso 5.0-DP1 a try I ran into the following.  I have a
clean and was wanting to create a simple trust between two systems
using rsh and /.rhosts authentication (yea, i know rsh is bad but our
silly software can run over ssh yet).  So, I did the usual steps:

  created /root/.rhosts with an entry as follows:

trustedhostname.mydomain.com root

  and of course chmod 600 /root/.rhosts

  uncommented the following line from /etc/inetd.conf
shell   stream  tcp nowait  root/usr/libexec/rshd rshd

  and fired up inetd:

clienthost# inetd -wW

  I've done this a million times but on the 5.0-DP1 system, the
following occurs:

orrie@trustedhost sudo rsh clienthost echo foo
rshd: Login incorrect.
orrie@trustedhost
  
  As you can see, I get the error rshd: Login incorrect.  I removed
the /etc/hosts.allow so it is not a tcp wrapper issue and nothing is
special in /etc/login.conf - it is a base install...no ports even.  Now
here is the odd thing.  If I replace /usr/libexec/rshd with an rshd
binary from a FreeBSD 4.5 box and make the following link (needed since
a 4.5 rshd binary needs to link to it):

ln -s /usr/lib/libc.so.5 /usr/lib/libc.so.4

  The above sudo rsh clienthost echo foo command works fine.  So, it
seems like something with the 5.0-DP1 rshd.  I didn't see anything
special in the man page that changed rshd's functionality.  Can
someone point out where I'm being stupid?

  Orrie
  [EMAIL PROTECTED]

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message