Re: [tlug] Under Solaris, are/can rsh access be logged?

[K M <nobel1210@example.com>]

Hi Jc,

Is this what you want?

bash-3.00# tail -f /var/adm/messages &
[1] 858
<snip>
bash-3.00#
bash-3.00# rsh 192.168.116.134 date
Mon Sep  5 21:12:49 JST 2011
bash-3.00#
bash-3.00# inetadm -M tcp_trace=true
bash-3.00#
bash-3.00#
bash-3.00# rsh 192.168.116.134 date
Mon Sep  5 21:13:23 JST 2011
bash-3.00# Sep  5 21:13:23 hostname inetd[450]: [ID 317013 daemon.notice] shell[949] from 192.168.116.134 989

bash-3.00#
bash-3.00#

Regards,
Kei

On Thu, Aug 25, 2011 at 1:59 PM, Jean-Christian Imbeault <jc.imbeault@example.com> wrote:

Under Solaris, where are rsh accesses logged? Under Linux I'd look at
/var/log/secure but under Solaris I can't find the equivalent file.

I've looked in /var/adm/messages and /var/log/auth but neither has any
entries for rsh access. I've read the syslog.conf docs but can't find
any specific mention of logging or how to log rsh.

Perhaps Solaris doesn't log rsh?

Jc