Why rsh not opens and reads PAM modules and limits.conf?
I am working on a project, that uses rsh utility for remote connection.
But my project needs some extra features for that, so I add that features.
Till now, all the things are going fine. But when I take a strace on rsh server. It shows that it opens and reads PAM modules and limits.conf.
But the rsh, that I made is not able to open and read PAM module and limits.conf.
I followed this link to check above things.
Number of calling of PAM module and all these things are exactly same in Standard rsh and mine rsh.
The reasons that I think, behind this weird behavior :-
- May be
configurefile does not load bymakefileof mine rsh. - May be it does not load
MCONFIG,MRULESin makefile.
But I didn't understand how can I confirm my doubt, and remove this problem.
I tried to use GDB debugger, but I am unable to locate where this problem occurs.
linux bash c pam rsh
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
add a comment |
I am working on a project, that uses rsh utility for remote connection.
But my project needs some extra features for that, so I add that features.
Till now, all the things are going fine. But when I take a strace on rsh server. It shows that it opens and reads PAM modules and limits.conf.
But the rsh, that I made is not able to open and read PAM module and limits.conf.
I followed this link to check above things.
Number of calling of PAM module and all these things are exactly same in Standard rsh and mine rsh.
The reasons that I think, behind this weird behavior :-
- May be
configurefile does not load bymakefileof mine rsh. - May be it does not load
MCONFIG,MRULESin makefile.
But I didn't understand how can I confirm my doubt, and remove this problem.
I tried to use GDB debugger, but I am unable to locate where this problem occurs.
linux bash c pam rsh
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
add a comment |
I am working on a project, that uses rsh utility for remote connection.
But my project needs some extra features for that, so I add that features.
Till now, all the things are going fine. But when I take a strace on rsh server. It shows that it opens and reads PAM modules and limits.conf.
But the rsh, that I made is not able to open and read PAM module and limits.conf.
I followed this link to check above things.
Number of calling of PAM module and all these things are exactly same in Standard rsh and mine rsh.
The reasons that I think, behind this weird behavior :-
- May be
configurefile does not load bymakefileof mine rsh. - May be it does not load
MCONFIG,MRULESin makefile.
But I didn't understand how can I confirm my doubt, and remove this problem.
I tried to use GDB debugger, but I am unable to locate where this problem occurs.
linux bash c pam rsh
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
I am working on a project, that uses rsh utility for remote connection.
But my project needs some extra features for that, so I add that features.
Till now, all the things are going fine. But when I take a strace on rsh server. It shows that it opens and reads PAM modules and limits.conf.
But the rsh, that I made is not able to open and read PAM module and limits.conf.
I followed this link to check above things.
Number of calling of PAM module and all these things are exactly same in Standard rsh and mine rsh.
The reasons that I think, behind this weird behavior :-
- May be
configurefile does not load bymakefileof mine rsh. - May be it does not load
MCONFIG,MRULESin makefile.
But I didn't understand how can I confirm my doubt, and remove this problem.
I tried to use GDB debugger, but I am unable to locate where this problem occurs.
linux bash c pam rsh
linux bash c pam rsh
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
edited 9 hours ago
Rui F Ribeiro
41.3k1481140
41.3k1481140
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
asked Mar 25 '13 at 8:46
devsdadevsda
2472817
2472817
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
Never, ever even consider using rsh for remote connections. It is horribly insecure to have rshd running, as it is very easy to take over any account (and even the whole machine) unless utmost care is taken. And as you see, it hasn't been kept up to date either.
Use ssh, with shared keys (no password). It isn't much harder to set up, and offers some security.
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
add a comment |
If this is going on the open internet, you should be prepared for a breakin soon after putting it up. Kiddies scan the net constantly for open ports with old vulnerabilities like this one. Search google for "rsh exploit" and you get around 100,000 hits.
Your project might have resource issues now, but you might consider adding the expense of cleaning up repeated breakins until rsh is closed.
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f69044%2fwhy-rsh-not-opens-and-reads-pam-modules-and-limits-conf%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Never, ever even consider using rsh for remote connections. It is horribly insecure to have rshd running, as it is very easy to take over any account (and even the whole machine) unless utmost care is taken. And as you see, it hasn't been kept up to date either.
Use ssh, with shared keys (no password). It isn't much harder to set up, and offers some security.
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
add a comment |
Never, ever even consider using rsh for remote connections. It is horribly insecure to have rshd running, as it is very easy to take over any account (and even the whole machine) unless utmost care is taken. And as you see, it hasn't been kept up to date either.
Use ssh, with shared keys (no password). It isn't much harder to set up, and offers some security.
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
add a comment |
Never, ever even consider using rsh for remote connections. It is horribly insecure to have rshd running, as it is very easy to take over any account (and even the whole machine) unless utmost care is taken. And as you see, it hasn't been kept up to date either.
Use ssh, with shared keys (no password). It isn't much harder to set up, and offers some security.
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
Never, ever even consider using rsh for remote connections. It is horribly insecure to have rshd running, as it is very easy to take over any account (and even the whole machine) unless utmost care is taken. And as you see, it hasn't been kept up to date either.
Use ssh, with shared keys (no password). It isn't much harder to set up, and offers some security.
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
answered Mar 25 '13 at 10:57
vonbrandvonbrand
14.3k22644
14.3k22644
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
add a comment |
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
Thanks for your advice. I will take care of the same. But right now, moving to ssh is not possible. Because of some project issues. So please help me to overcome of above problem. My head is banging, I didn't understand from where I can start. Help me please.
– devsda
Mar 25 '13 at 11:00
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
In our days your comment is just wrong! I don't have a single networking machine whose services are directly accessible through their public IPs. Anything but port 22 is always closed to the public. If I want to access such a machine I will route my traffic though an encrypting vpn anyway.
– ikrabbe
Jan 25 '17 at 15:33
add a comment |
If this is going on the open internet, you should be prepared for a breakin soon after putting it up. Kiddies scan the net constantly for open ports with old vulnerabilities like this one. Search google for "rsh exploit" and you get around 100,000 hits.
Your project might have resource issues now, but you might consider adding the expense of cleaning up repeated breakins until rsh is closed.
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
add a comment |
If this is going on the open internet, you should be prepared for a breakin soon after putting it up. Kiddies scan the net constantly for open ports with old vulnerabilities like this one. Search google for "rsh exploit" and you get around 100,000 hits.
Your project might have resource issues now, but you might consider adding the expense of cleaning up repeated breakins until rsh is closed.
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
add a comment |
If this is going on the open internet, you should be prepared for a breakin soon after putting it up. Kiddies scan the net constantly for open ports with old vulnerabilities like this one. Search google for "rsh exploit" and you get around 100,000 hits.
Your project might have resource issues now, but you might consider adding the expense of cleaning up repeated breakins until rsh is closed.
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
If this is going on the open internet, you should be prepared for a breakin soon after putting it up. Kiddies scan the net constantly for open ports with old vulnerabilities like this one. Search google for "rsh exploit" and you get around 100,000 hits.
Your project might have resource issues now, but you might consider adding the expense of cleaning up repeated breakins until rsh is closed.
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
answered Mar 25 '13 at 16:39
mitchell perilsteinmitchell perilstein
35613
35613
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f69044%2fwhy-rsh-not-opens-and-reads-pam-modules-and-limits-conf%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
