How to stop rexec/rsh in solaris 10

[underh20.s...@gmail.com]

Our server is running Solaris 10 3/05 (kernel 118833-36). Even though
the rexec/rsh has been disabled and not running (see below), one can
still issue "rsh" command to get to the server.
Anyone know how to disable the rexec/rsh in Solaris 10 ? I found this
very puzzling. Thjanks

# inetadm | grep rexec
disabled disabled svc:/network/rexec:default
#
#
# svcs -a | grep rexec
disabled 20:29:38 svc:/network/rexec:default

# ps -ef | grep rsh
root 5694 258 0 20:12:12 pts/1 0:00 grep rsh
#
# grep rsh /etc/inetd.conf
#

[gerryt]

On Feb 5, 5:16 pm, underh20.scubadiv...@gmail.com wrote:
> Our server is running Solaris 10 3/05 (kernel 118833-36). Even though
> the rexec/rsh has been disabled and not running (see below), one can
> still issue "rsh" command to get to the server.
> Anyone know how to disable the rexec/rsh in Solaris 10 ? I found this
> very puzzling. Thjanks

Thjanks?
Have a look at:
man in.rshd

[Darren Dunham]

underh20.s...@gmail.com wrote:
> Our server is running Solaris 10 3/05 (kernel 118833-36). Even though
> the rexec/rsh has been disabled and not running (see below), one can
> still issue "rsh" command to get to the server.
> Anyone know how to disable the rexec/rsh in Solaris 10 ? I found this
> very puzzling. Thjanks

> # inetadm | grep rexec
> disabled disabled svc:/network/rexec:default

rexec and rsh are separate protocols. You might be interested in the
'shell:default' and 'login:rlogin' services.

--
Darren Dunham ddu...@taos.com
Senior Technical Consultant TAOS http://www.taos.com/
Got some Dr Pepper? San Francisco, CA bay area
< This line left intentionally blank to confuse you. >

[Casper H.S. Dik]

underh20.s...@gmail.com writes:

>Our server is running Solaris 10 3/05 (kernel 118833-36). Even though
>the rexec/rsh has been disabled and not running (see below), one can
>still issue "rsh" command to get to the server.
>Anyone know how to disable the rexec/rsh in Solaris 10 ? I found this
>very puzzling. Thjanks

You're confusing rlogin with rsh.

If you type "rsh host" you are not connecting to the "rsh" daemon,
you're connecting to the rlogin daemon (in.rlogind)

svcadm disable shell:default
svcadm disable login:rlogin

Casper
--
Expressed in this posting are my opinions. They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.