[Bug 811441] New: rlogin fails with "rlogin: connection refused" under openSuse 12.3

bugzilla_noreply＠novell.com

25 Mar 2013 25 Mar '13

16:23

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c0 Summary: rlogin fails with "rlogin: connection refused" under openSuse 12.3 Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: x86-64 OS/Version: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: rnelson@airflowsciences.com QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:19.0) Gecko/20100101 Firefox/19.0 Under openSuse 12.2, rlogin is working as expected. after a distribution upgrade (zypper dup), it fails with: rlogin: connection refused. /var/log/messages shows: rlogind[7508]: pam_rhosts(rlogin:auth): allowed access to username@xxx as username login: FATAL: can't reopen tty: No such file or directory /etc/hosts.deny and /etc/hosts.allow confirmed to be identical before and after distribution upgrade /etc/passwd has username using a shell of /bin/sh. If I change it to /bin/bash the result is the same. Reproducible: Always Steps to Reproduce: 1. rlogin xxx 2. 3. Actual Results: rlogin: Connection refused Expected Results: a connection rsh works as expected -

...

rsh xxx cat /etc/HOSTNAME xxx

so it looks like its something in the login process. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

26 Mar 26 Mar

07:38

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c1 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO CC| |meissner@suse.com InfoProvider| |rnelson@airflowsciences.com --- Comment #1 from Marcus Meissner 2013-03-26 07:38:05 UTC --- it works half way for me. $ rlogin localhost connect to address ::1: Connection refused Trying 127.0.0.1... Password: <hangs> do you run it via xinetd? then run: rcxinetd status -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

10:12

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c2 Kai Muenz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |squ@tent.at --- Comment #2 from Kai Muenz 2013-03-26 10:12:45 UTC --- (In reply to comment #1)

...

it works half way for me.

$ rlogin localhost connect to address ::1: Connection refused Trying 127.0.0.1... Password: <hangs>

It also hangs at this point for me. I'm currently trying to work around it, as rsh, on the other hand, works fine here. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:27

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c3 Robert Nelson changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |rnelson@airflowsciences.com InfoProvider|rnelson@airflowsciences.com | --- Comment #3 from Robert Nelson 2013-03-26 13:27:19 UTC --- Per your request, here is the result of rcxinetd status. # rcxinetd status Checking for service xinetd: running xinetd.service - LSB: Starts the xinet daemon. Be aware that xinetd doesn't start if no service is configured to run under it. To enable xinetd services go to YaST Network Services (xinetd) section. Loaded: loaded (/etc/init.d/xinetd) Active: active (running) since Fri, 2013-03-15 08:57:47 EDT; 1 weeks and 4 days ago Process: 1117 ExecStart=/etc/init.d/xinetd start (code=exited, status=0/SUCCESS) CGroup: name=systemd:/system/xinetd.service └ 1125 /usr/sbin/xinetd -pidfile /var/run/xinetd.init.pid Mar 26 09:19:56 computername in.rlogind[30175]: connect from 172.20.144.xx (172.20.144.xx) Mar 26 09:19:57 computername rlogind[30175]: pam_rhosts(rlogin:auth): allowed access to username@computername as username I'm pretty sure the reason I get a "connection refused" instead of a hang is that the name of the computer making the rlogin request is in the /etc/hosts.equiv file of the machine receiving the request. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15:51

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c4 --- Comment #4 from Marcus Meissner 2013-03-26 15:51:42 UTC --- so you only see connection refused? or do you also see hangs=? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:04

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c5 --- Comment #5 from Robert Nelson 2013-03-26 16:04:42 UTC --- (In reply to comment #4)

...

so you only see connection refused? or do you also see hangs=?

I only see "connection refused". It appears the hang is at the password request and, with the computer name in /etc/hosts.equiv, no password request is made. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

4 Apr 4 Apr

21:05

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c6 --- Comment #6 from Richard Warner 2013-04-04 21:05:30 UTC --- I had the same basic problem. The rlogin client is OK on 12.3 (tested vs 12.2 server), and actually, the server itself is ok too. The real problem is "login" from util-linux. openSuse 12.2 uses util-linux-2.21.2-4.5.1.x86_64 and 12.3 uses 2.21.2-10.2.1. I tried a rebuilt source rpm from the 12.2 version on 12.3 and I was able to rlogin without a problem. Digging deeper, I installed the source rpms for both versions and compared them. I found a patch for login on the .2-10 version that is causing the problem: login-close-tty-before-vhangup.patch I modified the .spec file to eliminate that patch and then rebuilt and installed the .2-10 util-linux version and rlogin continued to work. So, to get this working, download the util-linux source rpm, install it, and then edit /usr/src/packages/SPECS/util-linux.spec and comment out the 2 lines for the login-close patch. Then "rpmbuild -bb /usr/src/packages/SPECS/util-linux.spec", and finally "rpm -Uvh --replacepkgs --replacefiles /usr/src/packages/RPMS/x86_64/util-linux-2.21.2-10.2.1.x86_64.rpm" to install the rebuilt rpm. Warning - if Suse does not fix this (and they might choose not to based on the comments in that patch file), a later update of util-linux could re-break this. You might have to do it again later in that case. You could alternatively lock the util-linux version. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

21:59

New subject: [Bug 811441] rlogin fails with "rlogin: connection refused" under openSuse 12.3

https://bugzilla.novell.com/show_bug.cgi?id=811441 https://bugzilla.novell.com/show_bug.cgi?id=811441#c7 --- Comment #7 from Robert Nelson 2013-04-04 21:59:38 UTC --- So this login patch causes a Regression. I would suggest that, as such, it cannot be justified. Please file this as a login bug. Since the solution is known, and easy, I'd appreciate it if the priority of this bug was raised. In the meantime, we should report this regression upstream. I imaging it would be best from the openSuse team, but I'll report it if no one else will. Bob Nelson (In reply to comment #6)

...

I had the same basic problem. The rlogin client is OK on 12.3 (tested vs 12.2 server), and actually, the server itself is ok too. The real problem is "login" from util-linux.

openSuse 12.2 uses util-linux-2.21.2-4.5.1.x86_64 and 12.3 uses 2.21.2-10.2.1. I tried a rebuilt source rpm from the 12.2 version on 12.3 and I was able to rlogin without a problem.

Digging deeper, I installed the source rpms for both versions and compared them. I found a patch for login on the .2-10 version that is causing the problem: login-close-tty-before-vhangup.patch

I modified the .spec file to eliminate that patch and then rebuilt and installed the .2-10 util-linux version and rlogin continued to work.

So, to get this working, download the util-linux source rpm, install it, and then edit /usr/src/packages/SPECS/util-linux.spec and comment out the 2 lines for the login-close patch. Then "rpmbuild -bb /usr/src/packages/SPECS/util-linux.spec", and finally "rpm -Uvh --replacepkgs --replacefiles /usr/src/packages/RPMS/x86_64/util-linux-2.21.2-10.2.1.x86_64.rpm" to install the rebuilt rpm.

Warning - if Suse does not fix this (and they might choose not to based on the comments in that patch file), a later update of util-linux could re-break this. You might have to do it again later in that case. You could alternatively lock the util-linux version.

-- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

2 May 2 May