Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
02-05-2003, 03:47 AM
|
#1
|
|
Member
Registered: Jan 2003
Distribution: Redhat Psyche, Redhat Shrike, Solaris 9
Posts: 51
Rep:
|
telnet via xinetd refuse root password
Hi Geeks,
I enabled here telnet:
[root@dell02 xinetd.d]# cat telnet
# default: on
# description: The telnet server serves telnet sessions; it uses \
# unencrypted username/password pairs for authentication.
service telnet
{
flags = REUSE
socket_type = stream
wait = no
user = root
server = /usr/sbin/in.telnetd
log_on_failure += USERID
disable = no
}
and restartet de daemon
[root@dell02 xinetd.d]# ps -ef | grep xinetd
root 969 1 0 Feb04 ? 00:00:00 xinetd -stayalive -reuse -pidfil
root 2522 1197 0 11:31 pts/0 00:00:00 grep xinetd
[root@uaila36 xinetd.d]# kill -1 969
when i try to telnet as root i get what you see (from localhost, via ssh) as normal user it works !!
[root@dell02 xinetd.d]# telnet localhost
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Red Hat Linux release 7.3 (Valhalla)
Kernel 2.4.18-3 on an i686
login: root
Password:
Login incorrect
login: Connection closed by foreign host.
[root@dell02 xinetd.d]#
i am not sure and believe this is a PAM problem, but I dont know how to enable it via PAM.
I know that telnet is a insecure service!!! i am behind a Firewall-1 (checkpoint) in a trusted network
thanx for answer
greetz
adme
|
|
|
|
02-05-2003, 04:16 AM
|
#2
|
|
Member
Registered: Jan 2003
Distribution: Redhat Psyche, Redhat Shrike, Solaris 9
Posts: 51
Original Poster
Rep:
|
sorry for this stupid post
the answer is:
[root@dell02 pam.d]# cat /etc/securetty
# für Telnet
pts/0
pts/1
pts/2
pts/3
pts/4
pts/5
pts/6
pts/7
pts/8
pts/9
pts/10
vc/1
vc/2
vc/3
vc/4
vc/5
vc/6
vc/7
vc/8
vc/9
vc/10
vc/11
tty1
tty2
tty3
tty4
tty5
tty6
tty7
tty8
tty9
tty10
tty11
[root@dell02 pam.d]#
|
|
|
|
02-05-2003, 02:04 PM
|
#3
|
|
Member
Registered: Dec 2002
Posts: 327
Rep:
|
Not sure how useful that was..
But, some time ago... RedHat 6 I think it was, they disabled the ability to login as root via telnet.
I'm not entirely sure how / if you can turn it back on, mind.. but this is expected behaviour. Ideally you should use ssh, or telnet as a user and su.
It prevents things like brute-forcing your root password, as you can lock out a user who's being hacked (via telnet), but can't ideally do that for root.
Slick.
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 09:06 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|