zoukankan      html  css  js  c++  java
  • Linux RSH主机互信配置

    Enabling rsh for Linux

    The following section describes how to enable remote shell.

    Symantec recommends configuring a secure shell environment for Veritas InfoScale product installations.

    See Manually configuring passwordless ssh.

    See the operating system documentation for more information on configuring remote shell.

    To enable rsh for rhel6/sles

    1. To ensure that the rsh and rsh-server RPMs are installed, type the following command:
      # rpm -qa | grep -i rsh

      If it is not already in the file, type the following command to append the line "rsh" to the /etc/securetty file:

      # echo "rsh" >> /etc/securetty
    2. Modify the line disable = no in the /etc/xinetd.d/rsh file.
    3. In the /etc/pam.d/rsh file, change the "auth" type from "required" to "sufficient":
      auth     sufficient
    4. Add the "promiscuous" flag into /etc/pam.d/rsh and /etc/pam.d/rlogin after item "pam_rhosts_auth.so".
    5. To enable the rsh server, type the following command:
      # chkconfig rsh on
    6. Modify the .rhosts file. Each line of the .rhosts file contains a fully qualified domain name or IP address for each remote system. This file also contains the name of a user having access to the local system. For example, if the root user must remotely access sys1 from sys2, add an entry for sys2.companyname.com to the .rhosts file on sys1 by typing the following command:
      # echo "sys2.companyname.com" >> $HOME/.rhosts
    7. Install the Veritas InfoScale product.

    To disable rsh for rhel6/sles

    1. Remove the "rsh" entry in the /etc/securetty file.
    2. Disable the rsh server by typing the following command:
      # chkconfig rsh off
    3. After you complete an installation procedure, delete the .rhosts file from each user's $HOME directory to ensure security:
      # rm -f $HOME/.rhosts

    To enable rsh for rhel7

    • Run the following commands to enable rsh passwordless connection:
      # systemctl start rsh.socket
      # systemctl start rlogin.socket
      # systemctl enable rsh.socket 
      # systemctl enable rlogin.socket 
      # echo rsh >> /etc/securetty
      # echo rlogin >> /etc/securetty
      #echo "+ +" >> /root/.rhosts		

    To disable rsh for rhel7

    • Run the following commands to disable rsh passwordless connection:
      # systemctl stop rsh.socket
      # systemctl stop rlogin.socket
      # systemctl disable rsh.socket 
      # systemctl disable rlogin.socket 
  • 相关阅读:
    Lync二次开发
    Socket 一对多通信
    DBImport V3.1 数据互导工具及文档生成器更新发布
    Sql学习第六天——SQL 巩固练习(用到了前几天几个知识点)
    文件监控
    Google Protocol Buffers 入门
    [原]常用Linux命令总结[Thx for commandlinefu]
    清理SQL Server日志释放文件空间
    ASP.NET MVC动态二级域名及ASP.NET管道机制
    搜索引擎——JobSearch简介
  • 原文地址:https://www.cnblogs.com/lixiaochun/p/8554030.html
Copyright © 2011-2022 走看看