Re: Overwhelming rshd

[Kevin Tyle <kevin meso com>]

Hi, 

I've seen a "similar but different" thing happen on some of our
6.1 systems when a script launches many rsh/rcp commands in a short
time to the same server.  This is what happens, as seen in the logs:

Jan 28 08:35:14 mach1 PAM_pwdb[4891]: (rsh) session opened for user xxxx by (uid=0)
Jan 28 08:35:15 mach1 pam_rhosts_auth[4892]: allowed to xxxx mach0 meso com as xxxx
Jan 28 08:35:15 mach1 PAM_pwdb[4892]: (rsh) session opened for user xxxx by (uid=0)
Jan 28 08:35:15 mach1 PAM_pwdb[4892]: (rsh) session closed for user xxxx
Jan 28 08:35:16 mach1 pam_rhosts_auth[4895]: allowed to xxxx mach0 meso com as xxxx
Jan 28 08:35:16 mach1 PAM_pwdb[4895]: (rsh) session opened for user xxxx by (uid=0)
Jan 28 08:35:17 mach1 inetd[464]: shell/tcp server failing (looping), service terminated

The service comes back after 5 minutes or so.

Any way to keep this from failing besides not hitting the server with rsh's so
quickly?

Thanks,

Kevin Tyle <kevin meso com>
MESO, Inc.
Troy, NY