Access with RSH

Hi,
I try to collect IP data (for accounting)from a 3745 Cisco router with IPAcco software on Linux platform.
The configuration on router, regarding to RSH, are below:
ip rcmd rsh-enable
ip rcmd remote-host root IP-address root enable
username root password 7 password
Where the IP Address is the IP of the remote machine and password is a local password of root.
I execute this command on Linux machine: rsh IPRouterAddress show ip accounting, but the log on router show this:
Jul 26 08:55:24.044: RCMD: [514 <- IP_Address_Linux_Machine:1023] recv 1022\0
Jul 26 08:55:24.296: RCMD: [514 <- IP_Address_Linux_Machine:1023] recv root\0root\0show ip acconting\0
Jul 26 08:55:24.296: RCMD: [514 -> IP_Address_Linux_Machine:1023] send <OK>
Jul 26 08:55:24.296: RCMD: [514 -> IP_Address_Linux_Machine:1023] send <BAD,Access denied.>\n
When I use a Windows platform there are no problem; infact I've access to router.
Anyone have a solution to this problem?
Thanks in advance.

The no ip rcmd rsh-enable command does not prohibit a local user of the router from executing a command on other routers and UNIX hosts on the network using rsh. The no form of this command only disables remote access to rsh on the router.
For more information on rsh please click following link:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1831/products_command_reference_chapter09186a00800d9833.html#1018286

Similar Messages

  • Problem with rsh (remote shell)

    Hi!
    I'm spanish and my english is not very good. I'm development a soft that connect with router cisco with rsh. And i have to send rsh commands but i can't. From my Linux shell command a request rsh:
    rsh 192.168.1.5 cisco-rsh
    cisco-rsh is a user that has privileges.
    A configuration of my FastEthernet0/0 on my router(cisco 2600) is:
    no ip rcmd domain-lookup
    ip rcmd rcp-enable
    ip rsh-enable
    ip rcmd remote-host cisco-rsh 192.168.1.33 cisco-rsh enable
    ip rcdm remote-username cisco-rsh
    ip rcmd source-interface FastEthernet0/0
    Then what is my problem? only can use rsh because my teacher is required.

    To enable the Cisco IOS software to receive incoming remote shell (rsh) protocol and remote copy (rcp) protocol requests, customers must configure an authentication database to control access to the router. This configuration is accomplished by using the ip rcmd remote-host command.
    http://www.cisco.com/en/US/docs/ios/12_2t/12_2t8/feature/guide/ftAuth.html

  • Over the years my children have set up 2 i tunes accounts on my computer is there a way to put them together as one account that everyone can access with their synced i pods, phones etc

    Over the years my children have set up 2 i tunes accounts on my computer (windows vista) can i amalgamate both into one account with one password / account details that all my family can access with their i pods, i phones, i touch etc

    How to use multiple iDevices with one computer

  • I no longer have access with the e-mail on my account. Can I change just the email on it to my current?

    I no longer have access with the e-mail on my account. Can I change just the email on it to my current? I know it is dumb but I just got a new iPhone and can't add it.

    You should be able to login here and change the email address on your account : http://appleid.apple.com

  • ISE Admin Access with AD Credentials fails after upgrade 1.2.1 to 1.3.0

    Hello,
    After upgrading ISE VM from 1.2.1 to 1.3.0.876, I can't connect on ISE with AD Credentials (Invalid Username or Password). It worked find before upgrading to 1.3.
    On another ISE VM in 1.3.0.876 version (w/o upgrade) with this kind of configuration, it's OK.
    I have double check the Post-upgrade tasks (particularly rejoining Active Directory). Everything worked find after this upgrade except the admin access with AD credentials.
    I don't use user certificate-based authentication for admin access. So I didn't execute application start ise safe CLI.
    My 802.1x wireless users passed authentication with AD credentials. So the ISE had correctly join my AD.
    I didn't find anything related to this admin access with AD credentials failure in the output of show logging application ise and show logging.
    I don't find anything related to this in bug search on Cisco tools.
    I tried to :
    - update the SID of my Admin AD Group, the result is still the same.
    - delete my admin access with AD credentials configuration then make this configuration again, but still the same error.
    Any ideas on this ? Could I find elements in another log ?
    Regards.

    Dear Markus,
    After logging as user "prdadm"
    su - prdadm
    bssltests% bash-3.00$ ls -a
    .                            .dbenv_bssltests.sh-old      .sapenv_bssltests.sh         startdb.log
    ..                           .dbenv_bssltests.sh-old10    .sapenv_bssltests.sh-new     startsap_.log
    .bash_history                .dbsrc_bssltests.csh         .sapenv_bssltests.sh-old10   startsap_DVEBMGS00.log
    .cshrc                       .dbsrc_bssltests.sh          .sapsrc_bssltests.csh        startsap_DVEBMGS01.log
    .dbenv_bssltests.csh         .login                       .sapsrc_bssltests.sh         stopdb.log
    .dbenv_bssltests.csh-new     .profile                     dev_sapstart                 stopsap_.log
    .dbenv_bssltests.csh-old     .sapenv_bssltests.csh        local.cshrc                  stopsap_DVEBMGS00.log
    .dbenv_bssltests.csh-old10   .sapenv_bssltests.csh-new    local.login                  stopsap_DVEBMGS01.log
    .dbenv_bssltests.sh          .sapenv_bssltests.csh-old    local.profile                trans.log
    .dbenv_bssltests.sh-new      .sapenv_bssltests.csh-old10  sqlnet.log
    bash-3.00$
    bash-3.00$
    I have changed envt settings in .dbenv_bssltests.csh & .dbenv_bssltests.sh
    .sapenv_bssltests.sh & .sapenv_bssltests.csh  [4 files]
    Regards,
    Ankita

  • Anonymous access with named users

    Hi!
    I am trying to set up anonymous access with named users on EP6 SP9. I am using Database only as UME Data storage. I have applied the note #728106, since most of the content is html-pages on the KM.
    I defined the UME settings ume.login.guest_user.uniqueids=anon01,anon02
    ume.login.anonymous_user.mode=1
    Restarted the server and attached user account into roles (which contain only anonymous content).
    I then accessed the page /irj/portal/anonymous (or the longer version /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.anonymous) and everything was fine. However I wasn't able to get the portal working with /irj/portal/anonymous?j_user=anon02. I always received Portal runtime error. From the logs I saw that the portal tried to access as user anon01.
    When I changed the UME settings into
    ume.login.guest_user.uniqueids=anon02,anon01
    I was able to get the anon02 user account working, but not /irj/portal/anonymous?j_user=anon01. From the logs I saw that the portal tried to access as user anon02.
    Both user account are using the same rule, portal desktop and framework page. I can see the correct (and different) TLN for each user only in the content are I see this error.
    Any ideas?
    Thanks,
    Petri

    I need to switch between two named anonymous users.
    It works fine using http://<server>:<port>/irj/portal?j_user=<first_Guest_user>&j_password=<pwd_of_first_Guest_user>&login_submit=true
    Then to switch to the other user I must do a log-off or close the browser and input the other url http://<server>:<port>/irj/portal?j_user=<second_Guest_user>&j_password=<pwd_of_second_Guest_user>&login_submit=true
    I developed a servlet to switch the users using IAuthentication (method forceLogoffUser) and then redirect to the respective url. But when I call forceLogoffUser method I get a login screen and the script stop executing. Passing 'returnURL' parameter  did not work.
    Parameters:
    req - HttpServletRequest
    resp - HttpServletResponse
    returnURL - url to use to logon again.
    Is there a way to switch automaticaly between the two named anonymous users?

  • How can the symbol and non-English diacritical marking, etc accessed with combinations of letters and functional keys prior to Snow Leopard be achieved in Snow Leopard?

    How can the symbol and non-English diacritical marking/punctuation pallet, available in pre-Snow Leopard OSes with various combinations of letter or number keys and functional keys, be accessed in Snow Leopard?  Those pre-Snow Leopard versions worked on the fly as one was making text in any pedestrian application and its native font (Mail, Text Edit, for example).  One didn't need to dig around in font libraries, change font preferences, etc.

    > One didn't need to dig around in font libraries, change font
    > preferences, etc.
    It hasn't worked like that since the Early Chalcolithic (ie, System 7 or thereabouts).
    You've already got plenty of answers. Briefly (and grossly oversimplified),
    - Mac OS X conforms to a standard known as Unicode; in its current incarnation, it defines over 100k characters.
    - A keypress is translated into a character according to the current keyboard layout.
    - The graphic representation of a character (ie, glyph), is provided by the current font.
    - If a font lacks a glyph for the requested character, either another font will be automatically chosen (Mac OS X text engine), or some form of feedback (empty box, question mark, etc) will be used.
    - To inspect the actual key codes, use a utility such as Key Codes.
    - To inspect the current keyboard layout, invoke Keyboard Viewer.
    - To inspect the full complement of glyphs of a font, invoke Character Viewer (also accessed with the Special Characters command).
    (Remember that both these utilities are resizable and zoomable -- you can enlarge them to a comfortable viewing size, then zoom out to see more of the screen for your original task.)
    - For a more detailed look, use a utility such as UnicodeChecker.
    - The default keyboard layout depends on your Mac OS X localisation.
    (Keep in mind that there's no need to stick with the default layout; choose whichever one makes sense to you, given your language, habits, and proclivities. Mac OS X comes bundled with quite a few, including some obviously designed for the huddled masses of refugees from the Dark Side, who, in their wretched ignorance, have the unmitigated gall of labelling our native ways "really uncomfortable". Oh well, this, too, shall pass.
    If none of the supplied keyboard layouts fits your needs -- if, for instance, you write your emails in Etruscan -- go out on the 'net, you'll find quite a few. Or write your own with Ukulele, it's not really all that difficult.)
    - Use Keyboard Viewer to familiarise yourself with the current layout and to enter the odd character; but, to be proficient, you should learn your layout to the point that KV is no longer needed.
    - Use Character Viewer to enter the odd character not available in the current keyboard layout.
    Neither Keyboard Viewer nor Character Viewer are effective tools for more extensive needs, eg, for writing and editing bilingual or multilingual texts. In such a case, you should enable the respective keyboard layouts and switch between them with a keyboard shortcut.
    A few interesting layouts bundled with Mac OS X have already been mentioned. Let me add three.
    - Dvorak: several layouts based on the Dvorak keyboard. It is claimed that the latter is more productive and lessens RSI risk.
    - US Extended: based on QWERTY, it offers a more extensive set of diacritics (eg, caron, breve) via dead keys.
    - Unicode Hex Input: also based QWERTY, it allows input by Unicode codepoint (in hexadecimal), so it's the most extensive layout of all; eg, to enter the character "Parenthesized Number Twelve" (U+247F), hold down Option, type "247f", release Option.

  • Apple tv 2 - root password has been changed to non default.   I need to access apple tv 2.   how do i get access with a forgotten password

    apple tv 2 - root password has been changed to non default.   I need to access apple tv 2.   how do i get access with a forgotten password

    Welcome to the Apple Community.
    It depends on which password you are referring to, but generally speaking you can always restore the Apple TV.

  • What can I change to gain access to my work vpn.  I can access with my MacBook Air and other routers.  Can use my ipad and this time capsule to successfully access the VPN.

    What can I change to gain access to my work vpn.  I can access with my MacBook Air and other routers.  Can use my ipad and this time capsule to successfully access the VPN.

    You need to give us a lot more info.
    I presume the MBA and the TC are the combo that doesn't work, although you don't clearly state that.
    If the ipad and TC work.. are you sure the ipad is connected via the TC and not 3G network?
    If it is then the TC itself is fine and the issue might be setup on the MBA.. although if the MBA works with other routers.. that rather confuses the matter.
    You need to actually tell us how the TC is setup in the network. What kind of broadband modem you have and what kind of vpn you are using.

  • Sharing Xbox Live access with Mac

    I've been trying to get my son's MacBook Pro to share its Internet access with his Xbox 360 over Ethernet but have been having a very hard time of it. I've searched around online and have found various tutorials that approach it different ways. I've followed each one step by step and have failed every time.  Usually I get an error on the Xbox telling me that it can't find the Xbox Live servers.
    The MacBook Pro gets on the Internet a 2WIRE router/modem.
    Any help would be greatly appreciated. Thanks.

    Hi gshamlian,
    Sorry for the late reply but the ASA 5500 series is considered a Cisco Classic product and this forum is for Cisco Small Business Products.
    I did some research and found a post in the Cisco NetPro Forums that may be of help.  Please click here for more info.
    Best regards,
    Cindy Toy
    Cisco Small Business Support
    Community Manager

  • Having trouble with Tiscali/TalkTalk site when accessed with 'FireFox', can't 'reply' to emails or report 'spam', other functions seem ok

    Having trouble with Tiscali/TalkTalk site when accessed with 'FireFox',
    can't 'reply' to emails or report 'spam', other functions seem ok
    == This happened ==
    Every time Firefox opened
    == On/Off few months now all time

    Try deleting cookies and cache:
    1. Tools| Clear recent history
    2. Time range to clear: Everything
    3. If it isn't already selected, select '''Cookies''' and '''Cache'''
    4. '''Clear now'''
    <u>Check cookie exceptions</u>
    1. Tools | Options | Privacy Panel
    2. Set '''Firefox will: Use custom settings for history''' Insure Accept cookies for sites and accept third-party cookies is selected
    3. Click '''Exceptions'''. If the misbehaving site is in that list, select it and click '''Remove site'''
    Also see [[Updating Firefox]]

  • Problems with rsh in solaris 8

    I have tried to execute a command with "rsh", like a "prstat", and it works but if I execute a "snoop" command, I see that the machine that runs the command(rsh) lost information. There is packets from TCP that has been return (in some occasions partially), this provokes the application losts information.
    Which can the problem be ?

    OK, but the problem is not in C++. Your C++ code just invokes invokes the shell and remote operations, and returns the result. The local C++ program cannot cause or repair communication problems between machines.

  • How can I transfer old Palm Pilot (Z22) info (calendar/to do lists/memos/contacts is synced to a Windows XP) to a program I can access with an iPod?

    How can I transfer old Palm Pilot (Z22) info (calendar/to do lists/memos/contacts is synced to a Windows XP) to a program I can access with an iPod? Thanks.

    Maybe by the link provided here:
    Palm Desktop and iPhone

  • How to start microsof access with parameter through runtime.exec

    Hi,
    I try to start access with parameter like this:
    String[] cmd = new String[4];
    cmd[0] = "C:\\Programme\\Microsoft Office\\OFFICE11\\MSACCESS.EXE";
    cmd[1]= "C:\\MyDB.mdb ";
    cmd[2] = "/cmd";
    cmd[3] = "parameter1 parameter2";
    Runtime rt = Runtime.getRuntime();
    Process proc = rt.exec(cmd);
    However the access mdb startet but it seems not to take the parameter i want to put in to access.
    Have anyone an Idea, what is wrong here?
    Thanks

    Hi
    What do you expect Access to do?
    The /cmd command line option sets the value that is returned by VBA Command function (see http://msdn2.microsoft.com/en-us/library/aa211469(office.11).aspx).
    If you want to start a macro, you would need the /x switch (see http://office.microsoft.com/en-us/access/HA101666051033.aspx).
    Hope this helps
    Christoph

  • LWA Guest Access with ISE and WLC

    Hi guys,
    Our Company try to implement Guest Access with ISE dan WLC with Local Web Auth Method. But there is problem that comes up with the certificate. This is the scenario :
    1. Guests try to connect wifi with SSID Guest
    2. Once it connect, guests open the browser and try to open a webpage (example: cisco.com)
    3. Because, guests didn't login, so it redirect to "ISE Guest Login Page" (url became :
    https://ise-hostname:8443/guestportal/Login.action?switch_url=https://1.1.1.1/login.html&wlan=Guest&redirect=www.cisco.com/
    4. If there is no ISE Guest Login Page installed, message Untrusted Connection message will appear, but it will be fine if they "Add Exception and install the certificate"
    5. After that the Guest Login Page will appear, and guests input their username and password.
    6. Login success and they will be redirected to www.cisco.com and there is pop up from 1.1.1.1 (WLC Virtual Interface IP) with logout button.
    The problem happen in scenario 6, after login success, the webpage with ISE IP address and message certificate error for 1.1.1.1 is appear.
    I know it happened when guests didn't have the WLC Login Page Certificate...
    My Question is, is there a way to tunneling WLC Certificate on ISE ? Or what can we do to make ISE validate WLC Certificate, so guests doesn't need to install WLC Certificate/ Root Certificate before connect to Wifi ?
    Thx 4 your answer and sorry for my bad English....

    Thx for your reply Peter, your solution is right,
    i don't choose CWA, because their DNS is not stable...
    i've found the problem...
    the third-party CA is revoked, so there is no way it will success until it fixed...
    and there is no guarantee, they will fix it soon..
    so solution that we choose is by disable "HTTPS" on WLC...
    "config network web-auth secureweb disable".
    "config network web-auth secureweb disable".
    "config network web-auth secureweb disable".
    "config network web-auth secureweb disable".
    "config network web-auth secureweb disable"
    thank you all...

Maybe you are looking for

  • New WD Caviar Hard Drive not showing up and S.M.A.R.T. is "not supported"

    Hi, hoping someone can help me out with this fairly quickly. I am using a Mac G5, here's the specs: Machine Name: Power Mac G5 Machine Model: PowerMac7,2 CPU Type: PowerPC 970 (2.2) Number Of CPUs: 1 CPU Speed: 1.8 GHz L2 Cache (per CPU): 512 KB Memo

  • Jaxws: Setting mime boundary in http header

    hi I am trying to attach a file to my soap message. I use handlers to attach the file.. I have to change the "Content Type"boundary="----=_Part_1_20501244.1204205295369" to some meaningful boundary name in my jax code. I dont know how to set that bou

  • Count of rows having different values

    SQL>  select  * from med; CERT  REC  PRIM RACE 100    10   EN   USA 100    11   EN   USA 100    12   EN   USA 100    13   SP   MX 200    14   SP   MX 200    15   SP   MX 6 rows selected. SQL>  select  * from sub; CERT  REC PRIM RACE 100    10   EN  

  • PDF problem, perhaps ?

    If this is not the strict correct forum for this question, I apologize but it was the best I could find; I use a lot of PDF files that I all create with OSX's "print as pdf" I, myself, have no problems opening and viewing and printing the files. Howe

  • TCP/IP error 111 (connection refused)

    I encountered TCP/IP error 111 (connection refused) in my source DB. I ran view ggsevt. Source 2013-09-06 17:47:41  INFO    OGG-00987  Oracle GoldenGate Command Interpreter for Oracle:  GGSCI c ommand (oracle): edit params mgr. 2013-09-06 17:48:00  I