| re Note 4065.2 by GYRO::HOLOHAN:
> The latest version of the IAS kit includes TCPwrapper for enhanced
> internet security. By default, after installing the IAS kit, you'll
> find that access is denied for most internet services. rshd is one
> of them. You'll need to enable it using the Internet Alphaserver
> administration gui (HTML front end to tcpwrapper).
Curiously, I now have the same problem (rsh/rexec permission
denied) after removing IAS V2.0 using their cleanup script.
I had previously had access for them enabled using the
Electronic Locker interface, but of course now that's gone,
and the rsh/rexec access that was working has stopped
working.
Apparently, installing then removing IAS V2.0 doesn't leave
the system as it was before.
What would I look for now?
Bob
|
| re Note 8284.8:
> > /var/adm/syslog-dated/xx-Dec-xx:xx/daemon.log
> >
> > for some clues....
>
> OK -- I'm having an inability to start a program on Digital UNIX
> from eXcursion on NT using rexec -- the above daemon.log contains multiple
> lines thus:
>
> REXECD FAILURE:SIA init
Well, never mind....
Probable user error (nay, certain user error!).
After removing IAS V2.0 from the server, I checked
/etc/inetd.conf to see if there were any relics, and there
were:
> #
> #
> # The following were added by the DIGITAL Internet AlphaServer software
> # Version 200 on Thu Jan 11 14:27:59 EST 1996
> #
> #
> dtspc stream tcp nowait root /usr/dt/bin/dtspcd dtspcd
> rpc.cmsd/2-4 dgram rpc/udp wait root /usr/dt/bin/rpc.cmsd rpc.cmsd
> rpc.ttdbserverd stream rpc/tcp wait root /usr/dt/bin/rpc.ttdbserverd rpc.ttdbserverd
So, logically, I commented out the lines following the comment!
Just a few minutes ago I compared this /etc/inetd.conf with
that of a similar system that had never had IAS installed
and, guess what, the comment was missing but the lines after
it were there!
It's my fault, but that comment surely is misleading.
rexec and rsh access now work.
Bob
P.S. I'm still having a problem in that certain Pathworks For
Digital UNIX Advanced Server (V6.0 ECO1) users can no longer
connect to their shares after removing IAS V2.0 -- but other
users can connect.
|