Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 84070 - RSH performance issue with hosts.equiv
Summary: RSH performance issue with hosts.equiv
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: rsh
Version: 7.2
Hardware: i386
OS: Linux
Target Milestone: ---
Assignee: Karel Zak
QA Contact: Ben Levenson
Depends On:
TreeView+ depends on / blocked
Reported: 2003-02-11 21:07 UTC by Mike Gahagan
Modified: 2007-04-18 16:51 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2004-11-17 14:05:12 UTC

Attachments (Terms of Use)
trace of rshd (deleted)
2003-02-11 21:10 UTC, Mike Gahagan
no flags Details

Description Mike Gahagan 2003-02-11 21:07:21 UTC
Description of problem:
This is actually with rsh-server, but I didn't see it as one of the choices.

rsh-server when used with /etc/hosts.equiv will perfom many unecessary host
lookups which causes significant delays in large environments, the scenario is
as follows:

In this environment there are many hosts listed in hosts.equiv, those hostnames
are resolvable through /etc/hosts distributed by NIS. Hosts in nsswitch.conf is
configured to use files, then nis, then DNS. What happens is that every entry in
hosts.equiv, we get a resolution attempt through /etc/hosts, DNS, NIS seemingly
at the same time. This can cause login attempts to take sometimes minutes to
complete. It seems that we should only be getting resolution attempts for the
client host name to see if it matches an entry in hosts.equiv. I suspect there
might also be a resolver library bug of some sort as well.

This problem DOES NOT occur when .rhosts files are in use.

Version-Release number of selected component (if applicable):

RH 6.2




How reproducible:


Steps to Reproduce:
1. see description
Actual results:

Logins work as expected but many, many unneeded lookups occur. The lookups can
be verified with either a packet analyzer on the network or strace'ing the rshd

Expected results:

Logins should work and unnecessary host lookups should not be performed.

Additional info:

Unfortunately, 'scrap rsh/rlogin & NIS for hostnames and use ssh and DNS
instead' is not an acceptable answer in this environment. Joshua Jensen and Tim
Kramer (both at Red Hat) can provide more information if needed. See also IT#
10403. See also the attached strace.

Comment 1 Mike Gahagan 2003-02-11 21:10:33 UTC
Created attachment 90013 [details]
trace of rshd

Comment 2 Karel Zak 2004-11-17 14:05:12 UTC
Won't fix. The code that evaluates /etc/hosts.equiv is located in the
pam_rhosts_auth module. And the logic of code is right because into
this file you can save aliases or other thigs and safe way how compare
remote host with a host in the hosts.equiv is convert all to IP.

Note You need to log in before you can comment on or make changes to this bug.