Re: Debugging rsh

From: David Z Maze (dmaze_at_debian.org)
Date: 01/21/04

  • Next message: Joan Tur: "Error w. USB device (under 2.6)" 
    To: debian-user@lists.debian.org
Date: Wed, 21 Jan 2004 10:55:19 -0500

    ms419@freezone.co.uk writes:

    > I am trying to rsh to my server. I am using kerberos authentication. I
    > believe I have configured everything correctly, but rsh simply
    > complains: "hostname: Connection refused".

    That message generally implies that nothing at all is listening for an
    rsh server, at least on the port the rsh client expects.

    > I checked my "inetd.conf".

    What did you find? Peeking in /etc/services, it looks like krsh is
    probably running on the 'kshell' port (TCP port 544), not the normal
    'shell' port (TCP port 514), so you might check that you have an rshd
    configured to listen on the right port.

    Also, there's the usual checks for Kerberized services: do you have a
    TGT? If you do, do you get a service ticket (for krb5,
    host/remote.host.name; for krb4, rcmd.remote.host.name)? (I'd guess
    "yes" and "no" from the symptom, but it can't hurt to check.) Which
    rsh server are you actually using?

    I think even around here, the standard for remote shell access is
    moving to ssh over Kerberized rsh and friends. You can configure ssh
    to do Kerberos authentication, and tunnel arbitrary things (including
    X programs) over the ssh connection. 

    -- 
David Maze         dmaze@debian.org      http://people.debian.org/~dmaze/
   MIT Athena Frequently Asked Question #578: "Why can't I use RSA
           authentication to connecto the dialup servers?"
-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Joan Tur: "Error w. USB device (under 2.6)"

    Relevant Pages

    • Re: krb5 port: -current behaves differently than 4.X w.r.t rsh (possibly EPERM from bind)
      ... host sends a new SYN back to the client on the client's source port + 1. ... closing off the original connection attempt. ... I'd really like to get the Kerberos rsh client ...
      (freebsd-current)
    • Re: rlogin issues
      ... i have enabled the "shell" in my ... However, after i enabled, i still dont get port 514. ... Port 514 isn't rlogin. ... It's rsh. ...
      (comp.unix.solaris)
    • Re: curious port activity
      ... > In general, client use over 1024, but rloing and rsh works differently. ... > Why the port of the rlogin and rsh works different? ... The use of a privileged port by the client is a primitive ...
      (Focus-Linux)
    • Re: rsh working intermittently
      ... >I am trying to install an application that requires this feature works. ... > I do not think that this particular application will even use rsh at ... >as username: Permission denied. ... systems don't enforce the Unix concept of privileged port numbers. ...
      (linux.redhat)
    • rsh is malfunctioning due to pf
      ... I have ipcad installed on 2 PC's running 5.3-RELEASE and 5-STABLE from ... ipcad provides ability to control them ... by rsh (ipcad implement rsh server by yourself). ...
      (freebsd-current)