Enabling and disabling rsh for Solaris

The following section describes how to enable remote shell on Solaris system.

Veritas recommends configuring a secure shell environment for Veritas product installations.

See Manually configuring and passwordless ssh.

See the operating system documentation for more information on configuring remote shell.

To enable rsh

  1. To determine the current status of rsh and rlogin, type the following command:
    # inetadm | grep -i login

    If the service is enabled, the following line is displayed:

    enabled online svc:/network/login:rlogin

    If the service is not enabled, the following line is displayed:

    disabled disabled svc:/network/login:rlogin
  2. To enable a disabled rsh/rlogin service, type the following command:
    # inetadm -e rlogin
  3. To disable an enabled rsh/rlogin service, type the following command:
    # inetadm -d rlogin
  4. Modify the .rhosts file. A separate .rhosts file is in the $HOME directory of each user. This file must be modified for each user who remotely accesses the system using rsh. Each line of the .rhosts file contains a fully qualified domain name or IP address for each remote system having access to the local system. For example, if the root user must remotely access system1 from system2, you must add an entry for system2.companyname.com in the .rhosts file on system1.
    # echo "system2.companyname.com" >> $HOME/.rhosts
  5. After you complete an installation procedure, delete the .rhosts file from each user's $HOME directory to ensure security:
    # rm -f $HOME/.rhosts