Weblog entry #30 for ajt
See all weblog entries made by ajt.
#30
rlogin c**p
Posted by ajt on Mon 20 Feb 2006 at 20:17
Today I've been installing SAP on a Linux box. To make it all work you have to enable all the antique and very insecure rlogin/rsh rubbish. It's a real pain in the posterior getting it all to work. If it were ssh then I'd know how to make it all work, it's all obvious but rlogin involves strange incantations and hidden files...
SAP may be the largest software company in Europe, and their flagship R/3 (or what ever it's called this month) may be the top piece of Enterprise software, but underneath the shine it's a nasty mess of cruft held together with sticky-tape, string and will-power...
SAP may be the largest software company in Europe, and their flagship R/3 (or what ever it's called this month) may be the top piece of Enterprise software, but underneath the shine it's a nasty mess of cruft held together with sticky-tape, string and will-power...
Comments on this Entry
Posted by Anonymous (84.45.xx.xx) on Mon 20 Feb 2006 at 20:57
Why do you need rlogin? I don't remember ever having to do anything with rlogin on any SAP system I've installed..
[ Parent | Reply to this comment ]
On a R/3 4.6C system the application servers and the central instance do some handshaking though rsh in their SIDadm csh start scripts. Personally I don't think it's actually mandatory, you could swap SSH for rsh but you'd need to change the SAP supplied scripts to make it all work, or at least link rsh to ssh.
I'm only "following orders", I'm sure with effort you could get rid a lot of cruft, there is a certain amount of "cargo-cult" inherited within how we run SAP at work anyway.
Either way, I can r* from one app server (RHEL) to the central instance (AIX) but I can't r* from the new app server (RHEL) to the central instance. I can r* from app server to app server, and from central instance to either app server. The config looks okay but there has to be an error somewhere. I'm sure it'll be okay in the morning...
At home my Debian boxes don't even have any r* tools installed, it's all SSH. It's quite ironic that my home systems are a lot more secure than work's system, I'm a nobody, the company I work for is one of the top 50 companies in the world...
--
"It's Not Magic, It's Work"
Adam
I'm only "following orders", I'm sure with effort you could get rid a lot of cruft, there is a certain amount of "cargo-cult" inherited within how we run SAP at work anyway.
Either way, I can r* from one app server (RHEL) to the central instance (AIX) but I can't r* from the new app server (RHEL) to the central instance. I can r* from app server to app server, and from central instance to either app server. The config looks okay but there has to be an error somewhere. I'm sure it'll be okay in the morning...
At home my Debian boxes don't even have any r* tools installed, it's all SSH. It's quite ironic that my home systems are a lot more secure than work's system, I'm a nobody, the company I work for is one of the top 50 companies in the world...
--
"It's Not Magic, It's Work"
Adam
[ Parent | Reply to this comment ]
Posted by Anonymous (84.161.xx.xx) on Tue 21 Feb 2006 at 10:41
I'm a nobody, the company I work for is one of the top 50 companies in the world.
I also worked for McDonalds once. It's nothing to be ashamed of.
I also worked for McDonalds once. It's nothing to be ashamed of.
[ Parent | Reply to this comment ]
Posted by Anonymous (84.45.xx.xx) on Wed 22 Feb 2006 at 18:09
Oh I see. We have an AIX DB and an AIX CI but with 30+ wintel app servers (soon to be replaced by more AIX boxen.
I've never seen the CI communicate with the app servers as part of startup. But then we start everything separately. I start the DB, then the CI then the app servers, not all in one go.
(top 50 company here too ;) )
I've never seen the CI communicate with the app servers as part of startup. But then we start everything separately. I start the DB, then the CI then the app servers, not all in one go.
(top 50 company here too ;) )
[ Parent | Reply to this comment ]