AIX

Hello,

Could someone explain why rlogin is allways allowed in my AIX 6.1 boxes, whatever user I use ?
According to documentation it should work only when .rhosts (or hosts.equiv) is properly set. But even these files do not exist - access is allowed.
If I use rsh(with specified command) it behaves as documented and access is denied if no .rhosts is properly set.
Could someone explain why this is happening ?

thanks
Vilius

Have no AIX 6.1 box here, but on 5.3 it works like intended. You could try to create empty .rhosts and hosts.equiv just to check if it behaves different.
Else you can always comment the rlogin line in the /etc/inetd.conf and do a

Code:

refresh -s inetd

to disable it completely, if that's a temporary solution for you.

Not sure I understand the question, rlogin will be permitted and will ask for a password if no .rhosts file or hosts.equiv file is set.

If you don't want people to be able to remote login vuia rlogin the best thing to do is to disable the daemon in /etc/inetd.conf and have the users use ssh instead.

If you really don't want users to be able to login then set rlogin=false in the /etc/security/user default stanza (be careful with this you could lock everyone out of the server) or even better individually for the users you don;t want to login.