Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.2 9/18/84; site gargoyle.UUCP Path: utzoo!watmath!clyde!burl!ulysses!mhuxr!mhuxn!ihnp4!gargoyle!chris From: chris@gargoyle.UUCP (Chris Johnston) Newsgroups: net.bugs.uucp Subject: Re: Handshake Failed - RLOGIN Message-ID: <324@gargoyle.UUCP> Date: Thu, 6-Feb-86 12:47:39 EST Article-I.D.: gargoyle.324 Posted: Thu Feb 6 12:47:39 1986 Date-Received: Sun, 9-Feb-86 08:31:42 EST References: <164@logico.UUCP> Reply-To: chris@gargoyle.UUCP (Chris Johnston) Organization: U. of Chicago, Computer Science Dept. Lines: 34 Keywords: RLOGIN is not ROK Summary: Security of uucp is being tightened up in the newer versions comming out. Most of this stuff has been in uucp all along but was ignored in the past. Turn on debugging, 'uucico -r1 -sfoo -x5', During startup remote system says "RLOGIN" rather than "ROK" -------------- On the remote site check "USERFILE" (or Permissions (sp?) in Honeydanber). Something like "gargoyle,Ugarg /usr/spool/uucppublic" should work. ", /" no longer leaves the system wide open. -------------- On the remote site watch out for truncation of name. gargoyle vs. gargoyl vs. gargoy (this might not be a problem but...) gargoyle,Ugarg /usr/spool/uucppublic gargoyl,Ugarg /usr/spool/uucppublic gargoy,Ugarg /usr/spool/uucppublic -------------- On the remote site watch out for more than one user name with the same user id number. This is definitely a problem! UUCP::6:1:UNIX-to-UNIX Copy:/usr/spool/uucppublic:/usr/lib/uucp/uucico uucp::7:1:UNIX-to-UNIX Copy:/usr/spool/uucppublic:/usr/lib/uucp/uucico auucp::7:1:UNIX-to-UNIX Copy:/usr/spool/uucppublic:/usr/lib/uucp/uucico buucp::7:1:UNIX-to-UNIX Copy:/usr/spool/uucppublic:/usr/lib/uucp/uucico