Permissions denied with rsh login (4343330)

"Permission denied" error when using rsh <host> <command> or FAILURE: 608 Pam <rsh><auth> not configured for QAS.

Please do the following:

1) cp -p /etc/pam.conf etc/pam.conf.bak

2) edit the /etc/pam.conf file

Change the RSH section so that the pam_rhosts_auth.so.1 is before the Pam_vas3.so lines:

FROM:

rsh service (explicit because of pam_rhost_auth,
# and pam_unix_auth for meaningful pam_setcred)
#
rsh auth sufficient /opt/quest/lib/security/$ISA/pam_vas3.so create_homedir get_nonvas_pass
rsh auth requisite /opt/quest/lib/security/$ISA/pam_vas3.so echo_return
rsh auth sufficient pam_rhosts_auth.so.1
rsh auth required pam_unix_cred.so.1 use_first_pass

TO:

rsh auth sufficient pam_rhosts_auth.so.1
rsh auth sufficient /opt/quest/lib/security/$ISA/pam_vas3.so create_homedir get_nonvas_pass
rsh auth requisite /opt/quest/lib/security/$ISA/pam_vas3.so echo_return
rsh auth required pam_unix_cred.so.1 use_first_pass

3) Then restart xinetd or inetd, or /etc/init.d/rsh, whichever controls rsh on your system.

For rsh on solaris we look specifically for pam_rhosts_auth and configure our section right underneath it. It should look like the following

rsh auth sufficient pam_rhosts_auth.so.1
rsh auth sufficient pam_vas3.so create_homedir try_first_pass
rsh auth requisite pam_vas3.so echo_return
rsh auth required pam_unix_cred.so.1