About DATABASE

ID  000095
제목  password 확인 없이 Remote system으로 rlogin 또는 rsh 실행하기
분류  네트워크
Product  
O/S  Solaris 2.x 

--------------------------------------------------------------------------------

1. 사용자가 개인별로 정의 할 경우

    home directory에 .rhosts 화일을 만들어 그 안에 rlogin또는 rsh 명령을
    실행 할 시스템의 이름과 userid를 넣어 놓는다.
      
 예1) host "cat"의 kildong 이라는 사용자가 remote host "dog"의 같은
      userid로 R-명령을 실행할 경우
  
             %hostname
             dog
             %whoami
             kildong
             % vi ~/.rhosts
             cat    
 
 예2) host "cat"의 kildong 이라는 사용자가 remote host "dog"의 "jjkim"
      이라는 사용자로 R-명령을 실행할 경우
     
      %hostname
             dog
             %whoami
             jjkim
             % vi ~/.rhosts
             cat kildong
            
        예3) host "cat"의 모든 사용자가 remote host "dog"의 "jjkim" 이라는 사용
             자로 R-명령을 실행할 경우
     
      %hostname
             dog
             %whoami
             jjkim
             % vi ~/.rhosts
             cat +
            
        예4) 모든 host의 "kildong" 이라는 사용자가 remote host "dog"의 "jjkim"
             이라는 사용자로 R-명령을 실행할 경우
     
      %hostname
             dog
             %whoami
             jjkim
             % vi ~/.rhosts
             + kildong
            
        예5) 모든 host의 어떤 사용자든지 remote host "dog"의 "jjkim" 이라는
             사용자로 R-명령을 실행할 경우
            
             %hostname
             dog
             %whoami
             jjkim
             % vi ~/.rhosts
             + +
                        
2. 시스템 admin이 /etc/hosts.equiv 화일에 지정하는 경우      
 
    root로 login하여 /etc/hosts.equiv 화일을 만들어 그 안에 rlogin또는 rsh
    명령을 실행 할 시스템의 이름과 userid를 넣어 놓는다.
   
    예1) /etc/hosts.equiv 화일에 remote hostname 만을 넣어 놓은 경우
   
     %hostname
     dog
     %vi /etc/hosts.equiv
     cat
     
     위와 같이 지정하면 remote host, "cat" 의 모든 사용자들이 dog 시스템의
     같은 userid로 R-명령여를 수행할 수 있다.
     
    예2) /etc/hosts.equiv 화일에 remote hostname과 userid를 지정한 경우
   
     %hostname
     dog
     %vi /etc/hosts.equiv
     cat kildong
     
     위와 같이 지정하면 remote host, "cat" 의 kildong이라는 사용자는 dog
     시스템의 root를 제외한 모든 사용자로 R-명령을 실행할 수 있다
     
    예3) /etc/hosts.equiv 화일에 "+"를 넣어 놓은 경우
   
     %hostname
     dog
     %vi /etc/hosts.equiv
     +
     
     위와 같이 하면 어떤 시스템에서든지 "dog" 시스템의 같은 userid에 대하여
     (root 제외) R-명령을 실행 할 수 있다.
     
   예4) /etc/hosts.equiv 화일에 "+ userid"를 넣어 놓은 경우
  
    %hostname
     dog
     %vi /etc/hosts.equiv
     + kildong
     
     위와 같이 하면 어떤 시스템에서든지 "kildong"이라는 사용자로 부터 "dog"
     시스템의 root를 제외한 모든 사용자로 R-명령을 실행할 수 있다.
     
   예5) /etc/hosts.equiv 화일에 remote hostname과 "+"를 넣어 놓은 경우
  
    %hostname
     dog
     %vi /etc/hosts.equiv
     cat +
     
     위와 같이 지정하면 remote host, "cat" 으로부터 dog" 시스템의 root를  
     제외한 모든 사용자에 대하여 R-명령을 실행 할 수 있다.
     
    예6) /etc/hosts.equiv 화일에 "+ +"를 넣어 놓은 경우
   
     %hostname
     dog
     %vi /etc/hosts.equiv
     + +
 
  위와 같이 지정하면 모든 remote host로 부터 dog 시스템의 root를 제외한
  모든 사용자에 대하여 R-명령을 실행 할 수 있다.
  
3. 예외사항

    /etc/hosts.equiv화일은 "root" 에게는 적용이 않되기 때문에 root에 대하여
    R-명령이 password를 물어 보지 않고 실행 되게 하려면 root의 home directory에
    .rhosts 화일을 만들어 permission을 열어줄 remote host와 userid를 각각
    등록해야 한다.
   
    시스템에 /etc/hosts.equiv 화일이 존재하고 사용자가 home directory에 .rhosts
    화일을 가지고 있으면 ?R-명령어 실행시 .rhosts화일의 내용이 적용된다.
   

Hi,
I m trying to execute some command on my Solaris 10 box from Windows
machine. But i m getting the message


rsh {servername} -l username comamnd
{Servername}: permission denied
rsh: can't establish connection


I have done changes in /etc/hosts and /.rhosts but still i m not able
to connect.
all these services are enabled.
svcadm enable svc:/network/login:rlogin
svcadm enable svc:/network/shell:default
svcadm enable svc:/network/login:rlogin

ssh is working but it is asking for password on each attempt of
execution of command.
May be this problem due to since in Solaris 10 inetd.conf is useless
and all the services are controlled by svcadm or inetadm.
Please let me know how can i overcome this problem.

기용:

svcadm restart svc:/network/login:rlogin

svcadm restart svc:/network/shell:default

해야지..적용..^^

root@unknown # more dfstab

#       Place share(1M) commands here for automatic execution
#       on entering init state 3.
#
#       Issue the command 'svcadm enable network/nfs/server' to
#       run the NFS daemon processes and the share commands, after adding
#       the very first entry to this file.
#
#       share [-F fstype] [ -o options] [-d "<text>"] <pathname> [resource]
#       .e.g,
#       share  -F nfs  -o rw=engineering  -d "home dirs"  /export/home2

root@unknown # more /etc/default/nfs
# ident "@(#)nfs        1.10    04/09/01 SMI"
#
# Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#

# Sets the maximum number of concurrent connection oriented connections.
# Default is unlimited and is obtained by not setting NFSD_MAX_CONNECTIONS.
# Equivalent to -c.
#NFSD_MAX_CONNECTIONS=

# Set connection queue length for the NFS over a connection-oriented
# transport. The default value is 32 entries.
# Equivalent to -l.
NFSD_LISTEN_BACKLOG=32

# Start NFS daemon over the specified protocol only.
# Equivalent to -p, ALL is equivalent to -a on the nfsd command line.
# Mutually exclusive with NFSD_DEVICE.
NFSD_PROTOCOL=ALL

# Start NFS daemon for the transport specified by the given device only.
# Equivalent to -t.
# Mutually exclusive with setting NFSD_PROTOCOL.
#NFSD_DEVICE=

# Maximum number of concurrent NFS requests.
# Equivalent to last numeric argument on nfsd command line.
NFSD_SERVERS=16

# Set connection queue length for lockd over a connection-oriented transport.
# Default and minimum value is 32.
LOCKD_LISTEN_BACKLOG=32

# Maximum number of concurrent lockd requests.
# Default is 20.
LOCKD_SERVERS=20

# Retransmit Timeout before lockd tries again.
# Default is 5.
LOCKD_RETRANSMIT_TIMEOUT=5

# Grace period in seconds that all clients (both NLM & NFSv4) have to
# reclaim locks after a server reboot. Also controls the NFSv4 lease
# interval.
# Overrides the deprecated setting LOCKD_GRACE_PERIOD.
# Default is 90 seconds.
GRACE_PERIOD=90

# Deprecated.
# As for GRACE_PERIOD, above.
# Default is 90 seconds.
#LOCKD_GRACE_PERIOD=90

# Sets the minimum version of the NFS protocol that will be registered
# and offered by the server.  The default is 2.
NFS_SERVER_VERSMIN=2

# Sets the maximum version of the NFS protocol that will be registered
# and offered by the server.  The default is 4.
NFS_SERVER_VERSMAX=4

# Sets the minimum version of the NFS protocol that will be used by
# the NFS client.  Can be overridden by the "vers=" NFS mount option.
# The default is 2.
#NFS_CLIENT_VERSMIN=2

# Sets the maximum version of the NFS protocol that will be used by
# the NFS client.  Can be overridden by the "vers=" NFS mount option.
# If "vers=" is not specified for an NFS mount, this is the version
# that will be attempted first.  The default is 4.
#NFS_CLIENT_VERSMAX=4

# Determines if the NFS version 4 delegation feature will be enabled
# for the server.  If it is enabled, the server will attempt to
# provide delegations to the NFS version 4 client. The default is on.
#NFS_SERVER_DELEGATION=on

# Specifies to nfsmapid daemon that it is to override its default
# behavior of using the DNS domain, and that it is to use 'domain' as
# the domain to append to outbound attribute strings, and that it is to
# use 'domain' to compare against inbound attribute strings.
NFSMAPID_DOMAIN=domain

#vi /etc/dfs/dfstab

----------------------

share -o rw /export/home/data1

share -o rw /export/home/data2

#svsc svc:/network/fs/server

STATE             STIME             FMRI

disabled           00:00"00         svs:/network/nfs/server:default

#svcadm enable svc:/network/nfs/server

#svsc svc:/network/fs/server

STATE             STIME             FMRI

online              00:00"00         svs:/network/nfs/server:default

#share

-              /export/home/data1         rw   ""

-              /export/home/data2         rw   ""

#svcs svc:/nework/nfs/mapid:default

STATE             STIME             FMRI

disabled           00:00"00         svs:/network/nfs/mapid:default

#svcadm restart svc:/network/nfs/mapid:default

#svcs svc:/nework/nfs/mapid:default

STATE             STIME             FMRI

online              00:00"00         svs:/network/nfs/mapid:default

================================================================

[client 설정]

#vi /etc/default/nfs

# ident "@(#)nfs        1.10    04/09/01 SMI"
#
# Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
# Use is subject to license terms.
#

# Sets the maximum number of concurrent connection oriented connections.
# Default is unlimited and is obtained by not setting NFSD_MAX_CONNECTIONS.
# Equivalent to -c.
#NFSD_MAX_CONNECTIONS=

# Set connection queue length for the NFS over a connection-oriented
# transport. The default value is 32 entries.
# Equivalent to -l.
NFSD_LISTEN_BACKLOG=32

# Start NFS daemon over the specified protocol only.
# Equivalent to -p, ALL is equivalent to -a on the nfsd command line.
# Mutually exclusive with NFSD_DEVICE.
NFSD_PROTOCOL=ALL

# Start NFS daemon for the transport specified by the given device only.
# Equivalent to -t.
# Mutually exclusive with setting NFSD_PROTOCOL.
#NFSD_DEVICE=

# Maximum number of concurrent NFS requests.
# Equivalent to last numeric argument on nfsd command line.
NFSD_SERVERS=16

# Set connection queue length for lockd over a connection-oriented transport.
# Default and minimum value is 32.
LOCKD_LISTEN_BACKLOG=32

# Maximum number of concurrent lockd requests.
# Default is 20.
LOCKD_SERVERS=20

# Retransmit Timeout before lockd tries again.
# Default is 5.
LOCKD_RETRANSMIT_TIMEOUT=5

# Grace period in seconds that all clients (both NLM & NFSv4) have to
# reclaim locks after a server reboot. Also controls the NFSv4 lease
# interval.
# Overrides the deprecated setting LOCKD_GRACE_PERIOD.
# Default is 90 seconds.
GRACE_PERIOD=90

# Deprecated.
# As for GRACE_PERIOD, above.
# Default is 90 seconds.
#LOCKD_GRACE_PERIOD=90

# Sets the minimum version of the NFS protocol that will be registered
# and offered by the server.  The default is 2.
#NFS_SERVER_VERSMIN=2

# Sets the maximum version of the NFS protocol that will be registered
# and offered by the server.  The default is 4.
#NFS_SERVER_VERSMAX=4

# Sets the minimum version of the NFS protocol that will be used by
# the NFS client.  Can be overridden by the "vers=" NFS mount option.
# The default is 2.
NFS_CLIENT_VERSMIN=2

# Sets the maximum version of the NFS protocol that will be used by
# the NFS client.  Can be overridden by the "vers=" NFS mount option.
# If "vers=" is not specified for an NFS mount, this is the version
# that will be attempted first.  The default is 4.
NFS_CLIENT_VERSMAX=4

# Determines if the NFS version 4 delegation feature will be enabled
# for the server.  If it is enabled, the server will attempt to
# provide delegations to the NFS version 4 client. The default is on.
#NFS_SERVER_DELEGATION=on

# Specifies to nfsmapid daemon that it is to override its default
# behavior of using the DNS domain, and that it is to use 'domain' as
# the domain to append to outbound attribute strings, and that it is to
# use 'domain' to compare against inbound attribute strings.
NFSMAPID_DOMAIN=domain

#svcadm restart svc:/network/nfs/client:default

#svcadm enable svc:/network/nfs/mapid:default

#mount 서버IP:/ /mnt

#ls -al /mnt

#netstat -an | egrep '2049'