리눅스 > Redhat(CentOS) > [redhat6] rsh 사용법

	게시물 259건

[redhat6] rsh 사용법

글쓴이 : theko 날짜 : 2016-03-15 (화) 13:12 조회 : 4726

1. 패키지 설치

yum install rsh-server

2. 설정

# vim /etc/securetty

rsh // 추가

rlogin //추가

# cat /etc/hosts

192.168.122.11 rhcs03

192.168.122.12 rhcs04

# vi /etc/hosts.equiv

rhcs03

rhcs04

# vi /root/.rhosts

rhcs03 root

rhcs04 root

# vim /etc/xinetd.d/rlogin

# vim /etc/xinetd.d/rsh

# vim /etc/xinetd.d/rexec

disable = no // 위 3개 동일

==> disable = yes

/etc/init.d/xinetd restart

3. TEST

# rsh rhcs04 ls /root

theko

2017-11-09 (목) 23:16

만약 rlogin을 빼면 client에서 접근 시 패스워드를 묻고,

rsh로 접근 시에는 Permission denied. 메시지와 함께 접근이 안된다.

pam 설정

비밀번호 없이 접근 제어를 하기 위해서 pam 설정을 수정한다.

/etc/pam.d/rsh와 /etc/pam.d/rlogin에 대해 아래처럼 수정한다. 위 4줄을 required -> sufficient 변경

[root@rsh-Server ~]# vim /etc/pam.d/rlogin

auth sufficient pam_nologin.so

auth sufficient pam_securetty.so

auth sufficient pam_env.so

auth sufficient pam_rhosts.so

auth include password-auth

account include password-auth

password include password-auth

session optional pam_keyinit.so force revoke

session required pam_loginuid.so

session include password-auth

<p><span style="color: #3366ff;">만약 rlogin을 빼면 client에서 접근 시 패스워드를 묻고,</span></p>
<p><span style="color: #3366ff;">rsh로 접근 시에는&nbsp;Permission denied. 메시지와 함께 접근이 안된다.</span></p><p><br></p><h4><span id="16_pam"><strong>pam 설정</strong></span></h4>
<p>비밀번호 없이 접근 제어를 하기 위해서 pam 설정을 수정한다.</p>
<p>/etc/pam.d/rsh와 /etc/pam.d/rlogin에 대해 아래처럼 수정한다. 위 4줄을 required -&gt;&nbsp;sufficient 변경</p>

<div id="crayon-5a045f9a87f2e848350747" class="crayon-syntax crayon-theme-dark-terminal crayon-font-consolas crayon-os-pc print-yes notranslate" data-settings=" minimize scroll-mouseover" style="margin-top: 12px; margin-bottom: 12px; font-size: 12px ! important; line-height: 15px ! important; height: auto;">
		
			
			
			<div class="crayon-plain-wrap"><textarea class="crayon-plain print-no" data-settings="dblclick" readonly="readonly" style="-moz-tab-size: 4; font-size: 12px ! important; line-height: 15px ! important; z-index: 0; opacity: 0; overflow: hidden;" wrap="soft">[root@rsh-Server ~]# vim /etc/pam.d/rlogin
auth       sufficient   pam_nologin.so
auth       sufficient   pam_securetty.so
auth       sufficient   pam_env.so
auth       sufficient   pam_rhosts.so
auth       include      password-auth
account    include      password-auth
password   include      password-auth
session    optional     pam_keyinit.so    force revoke
session    required     pam_loginuid.so
session    include      password-auth</textarea></div>
			<div class="crayon-main" style="position: relative; z-index: 1; overflow: hidden;">
				<table style="margin-left: -25px;" class="crayon-table">
					<tbody><tr class="crayon-row">
				<td class="crayon-nums " data-settings="hide">
					<div class="crayon-nums-content" style="font-size: 12px !important; line-height: 15px !important;"><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-1">1</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-2">2</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-3">3</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-4">4</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-5">5</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-6">6</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-7">7</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-8">8</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-9">9</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-10">10</div><div class="crayon-num" data-line="crayon-5a045f9a87f2e848350747-11">11</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-1"><span class="crayon-sy">[</span><span class="crayon-v">root</span><span class="crayon-sy">@</span><span class="crayon-v">rsh</span><span class="crayon-o">-</span><span class="crayon-v">Server</span><span class="crayon-h"> </span><span class="crayon-o">~</span><span class="crayon-sy">]</span><span class="crayon-p"># vim /etc/pam.d/rlogin</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-2"><span class="crayon-e">auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-e">sufficient&nbsp;&nbsp; </span><span class="crayon-v">pam_nologin</span><span class="crayon-sy">.</span><span class="crayon-e">so</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-3"><span class="crayon-e">auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-e">sufficient&nbsp;&nbsp; </span><span class="crayon-v">pam_securetty</span><span class="crayon-sy">.</span><span class="crayon-e">so</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-4"><span class="crayon-e">auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-e">sufficient&nbsp;&nbsp; </span><span class="crayon-v">pam_env</span><span class="crayon-sy">.</span><span class="crayon-e">so</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-5"><span class="crayon-e">auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-e">sufficient&nbsp;&nbsp; </span><span class="crayon-v">pam_rhosts</span><span class="crayon-sy">.</span><span class="crayon-e">so</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-6"><span class="crayon-e">auth&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-e">include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-v">password</span><span class="crayon-o">-</span><span class="crayon-e">auth</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-7"><span class="crayon-e">account&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-e">include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-v">password</span><span class="crayon-o">-</span><span class="crayon-e">auth</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-8"><span class="crayon-e">password&nbsp;&nbsp; </span><span class="crayon-e">include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-v">password</span><span class="crayon-o">-</span><span class="crayon-e">auth</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-9"><span class="crayon-e">session&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-e">optional&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-v">pam_keyinit</span><span class="crayon-sy">.</span><span class="crayon-e">so&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-e">force </span><span class="crayon-e">revoke</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-10"><span class="crayon-e">session&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-e">required&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-v">pam_loginuid</span><span class="crayon-sy">.</span><span class="crayon-e">so</span></div><div class="crayon-line" id="crayon-5a045f9a87f2e848350747-11"><span class="crayon-e">session&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-e">include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="crayon-v">password</span><span class="crayon-o">-</span><span class="crayon-v">auth</span></div></div></td></tr></tbody></table></div></div>