AIX

Hi,

I have a server which I've configured to allow an rsh trust from a csm server. However, of the 3 vlans on the target server, I can only rsh to one of them without being prompted for the password.

On lpar1
$ ifconfig -a
en2: flags=1e080863,480<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST,GROUPRT,64BIT,CHECKSUM_OFFLOAD( ACTIVE),CHAIN>
inet 10.162.73.138 netmask 0xffffff80 broadcast 10.162.73.255
tcp_sendspace 262144 tcp_recvspace 262144 rfc1323 1
en3: flags=5e080863,c0<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST,GROUPRT,64BIT,CHECKSUM_OFFLOAD(A CTIVE),PSEG,LARGESEND,CHAIN>
inet 10.162.70.71 netmask 0xffffffc0 broadcast 10.162.70.127
en5: flags=1e080863,80<UP,BROADCAST,NOTRAILERS,RUNNING,SIMPLEX,MULTICAST,GROUPRT,64BIT,CHECKSUM_OFFLOAD(A CTIVE),CHAIN>
inet 10.162.73.11 netmask 0xffffff80 broadcast 10.162.73.127
tcp_sendspace 262144 tcp_recvspace 262144 rfc1323 1

On csm server
csms01:/ $ rsh 10.162.70.71
root's Password:

csms01:/ $ rsh 10.162.73.11
root's Password:

csms01:/ $ rsh 10.162.73.138
Last login: Wed Mar 19 12:51:07 GMT 2008 on /dev/pts/0 from csms01-tsm
root@lpar1:/ $

Can anyone suggest why this only works to 1 of the vlans? I have several other servers with a similar ip configuration and I can rsh too all the vlans without any problems.

Thanks

Gareth

Hi

R-commands use some kind of trusted relationship by editing the .rhosts or the /etc/hosts.equiv file.

Run commands sequentially across a cluster from a UNIX server, Part 2: Remote shell (rsh)

So if you don't configure each file, let's say the .rhosts file, on each machine you won't be able to do what you want.

My recommendation is to drop the use of r-commands and use OpenSSH instead. R-commands send info across the network in plain text and their use is known as security pitfall. You can configure OpenSSH in such a way no password prompt is used by exchanging encrypted keys between hosts.

Hope this helps