rsh doesn't work anymore

[dickiebird]

An engineer called 5 days ago to service our RS6000 Aix 4.3.3 server, since when rsh doesn't work anymore ( we only use root to rsh).
We can still ping, rlogin and rcp perfectly well.
The set-up of /.rhosts and /etc/hosts.equiv has not been changed in any way.
Anyone any thoughts ?
TIA

Dickie Bird (-)))

 

[bi]

What about your inetd.conf? Would he have commented out the rsh line there?

 

[dickiebird]

Nope - its dated 4 years old. The engineer hasn't changed any config stuff at all (he claims).
inetd.conf looks like this :-

uucp stream tcp nowait root /etc/uucpd uucpd
ftp stream tcp nowait root /etc/ftpd ftpd
telnet stream tcp nowait root /etc/telnetd telnetd
shell stream tcp nowait root /etc/rshd rshd
login stream tcp nowait root /etc/rlogind rlogind
exec stream tcp nowait root /etc/rexecd rexecd
#bootps dgram udp wait root /etc/bootpd bootpd
#finger stream tcp nowait nobody /etc/fingerd fingerd
## The following line is the new style tftp daemon - allows write create.
## The following line needs to be uncommented and run inetimp to enable tftpd
#tftp dgram udp wait nobody /etc/tftpd tftpd -n
#biff dgram udp wait root /etc/comsat comsat
#talk dgram udp wait root /etc/talkd talkd
ntalk dgram udp wait root /etc/talkd talkd
#rexd sunrpc_tcp tcp wait root /usr/etc/rpc.rexd rexd 100017 1
rstatd sunrpc_udp udp wait root /usr/etc/rpc.rstatd rstatd 100001 1-3
rusersd sunrpc_udp udp wait root /usr/etc/rpc.rusersd rusersd 100002 1-2
rwalld sunrpc_udp udp wait root /usr/etc/rpc.rwalld rwalld 100008 1
sprayd sunrpc_udp udp wait root /usr/etc/rpc.sprayd sprayd 100012 1
pcnfsd sunrpc_udp udp wait root /etc/rpc.pcnfsd pcnfsd 150001 1
## The following line is for installing over the network.
#instsrv stream tcp nowait netinst /u/netinst/bin/instsrv instsrv -r /tmp/netinstalllog /u/netinst/scripts
echo stream tcp nowait root internal
discard stream tcp nowait root internal
chargen stream tcp nowait root internal
daytime stream tcp nowait root internal
time stream tcp nowait root internal
echo dgram udp wait root internal
discard dgram udp wait root internal
chargen dgram udp wait root internal
daytime dgram udp wait root internal
time dgram udp wait root internal
bgssd stream tcp nowait root /etc/bgs/SD/bgssd bgssd -d /etc/bgs/SD
best1 stream tcp nowait root /bgs/best1server best1server

Does that help?

Dickie Bird (-)))

 

[dickiebird]

Also :
the binaries are thus:-
-r-sr-xr-- 1 root system 18755 15 Mar 1996 /usr/sbin/rshd
-r-sr-xr-x 1 root bin 13108 29 Apr 1996 /usr/bin/rlogin
-r-sr-xr-x 1 root system 8858 26 Aug 1997 /usr/bin/rsh

and /.rhosts :-
-rw------- 1 root system 314 20 May 09:02 .rhosts

Dickie Bird (-)))

 

[Morsing]

How exactly doesn't it work??

Cheers

Henrik Morsing
Certified AIX 4.3 Systems Administration
& p690 Technical Support

 

[dickiebird]

It just hangs. I issue rsh remserver ls /tmp
and nothing happens - not even a timeout message
If I issue rsh remserver I get an rlogin prompt
(which is correct, according to man pages)
So I Cntrl-C to quit and return to the root prompt.
We have an infonet set-up here - Could firewall issues be involved ?
TIA


Dickie Bird (-)))

 

[DSMARWAY]

hi,

can you rsh from the second sever to the first ?
do you have NFS running ? does df -k hang
can you telnet to the second server does it hang or do you
get a login prompt straight away

is inetd running on both machines ? try refreshing inetd
daemon i.e. refresh -s inetd

 

[dickiebird]

Hi
1)rsh fails both to and from the remote server, even with a df command(assuming you meant 'rsh remsite df') df works OK locally too. AIX4.3.3 doesn't allow -k, it's the default
2)NFS is running :-
root 7651 1942 0 18 May - 0:06 /usr/etc/nfsd 8
3)I can telnet to the remote server OK - immediate
4)I have re-booted sice this problem started. Inetd is running :
root 4524 1942 0 18 May - 0:07 /etc/inetd

Thanks for your time..........

Dickie Bird (-)))

 

[dickiebird]

Looks more and more like an Infonet/firewall issue. I just rsh'd to our DR server(this server is not on the Infonet )
, with no problem

Dickie Bird (-)))

 

[victorv]

hi,

could you show us the content of .rhosts at target machine ?

Can, now, the target machine recognize the user entering
the command ?
Use you NIS ? Have the machines, the same users ?

Reading better your post, I see you need only root :
can target machine, resolve the hostname of the "client"
one ?

bye

 

[dickiebird]

Grrr-r-r-r !!!!!
We had a firewall update which wasn't cascaded to those who need to know. The new firewall version has a bug regards rsh
Supplier - ViStorm
They claim they're working on fix - hmmmmmm-m-m-m


Dickie Bird (-)))