LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 10-14-2003, 08:37 AM   #1
gallet
Member
 
Registered: Aug 2003
Posts: 34

Rep: Reputation: 15
Question Unix SCO 5.06 .profile


Hi, I have a problem with the .profile file, in my Unix SCO is running a legacy application so, when i user try to run the application from a windows SO the open the software without problem and ask the user to put a user name and password, but the main problem is that when i do telnet to my unix box and ask me for user name for example if i put john and press enter and at the same time i press the delete key the user get the unix prompt so i dont know what can i do with this security weakness. By the way, each user havent got a password, i just define the user name with a password, i mean the just put the user name when the do telnet to the unix box.
 
Old 10-14-2003, 09:28 AM   #2
dkloes
Member
 
Registered: Oct 2003
Posts: 66

Rep: Reputation: 15
It is not clear exactly what is happening. The login and password for both types of login should be the same. When accessing the application from Windows, are you using terminal emulation software or are the users using telnet? You should not be able to break the login with the delete key in either case. Is the application program being run from the .profile file?
 
Old 10-14-2003, 01:01 PM   #3
gallet
Member
 
Registered: Aug 2003
Posts: 34

Original Poster
Rep: Reputation: 15
I am using terminal emulation and the login and password is not the same for the unix box is different thant from the application, the problem is why if i press the delete key it goes to the prompt rather than goes to the application. This is i security vulnerability. isnt it.
 
Old 10-14-2003, 01:26 PM   #4
gallet
Member
 
Registered: Aug 2003
Posts: 34

Original Poster
Rep: Reputation: 15
why nobody wants to help me, is there one that know how to solve this problem........
 
Old 10-14-2003, 02:12 PM   #5
Walt_R
LQ Newbie
 
Registered: Oct 2003
Posts: 8

Rep: Reputation: 0
I am not sure I understand your problem.
 
Old 10-14-2003, 02:21 PM   #6
gallet
Member
 
Registered: Aug 2003
Posts: 34

Original Poster
Rep: Reputation: 15
is simple why if i telnet my unix box and i put user name and after press enter at the same time if i press delete key it goes to the unix shell rather than goes to the application
 
Old 10-14-2003, 02:41 PM   #7
Walt_R
LQ Newbie
 
Registered: Oct 2003
Posts: 8

Rep: Reputation: 0
Any time you telnet into a system you will be presented with a text shell for log in. This is normal operation. I do not know how to set it up, but there is a restricted shell that an outside user can telnet into. I beleive you can define exactly what programs a user can execute in a restricted shell. IE:

After the user logs into a restricted shell they are presented with a menu, and if the user tries to break out of the menu they can be logged out of the system.

Each user needs their own user name and password.
It sound to like you are trying to defeat unix security.

I think there is a secure shell that is part of SSH.
 
Old 10-14-2003, 02:48 PM   #8
gallet
Member
 
Registered: Aug 2003
Posts: 34

Original Poster
Rep: Reputation: 15
i have one user called generic that doesnt need password i mean i defined without password and i am using that user for 20 users more within the company so if i telnet the server for example:

c:\>telnet 10.x.x.x press enter
login: generic press enter
It goes into the legacy application but if at the same time that i pressed the enter key after i put the login name if i press the delete key it goes to the unix prompt i mean the generic user bypass the .profile and break into the unix shell rather than the legacy application.....Any idea.
 
Old 10-14-2003, 03:03 PM   #9
mossy
Member
 
Registered: Aug 2003
Location: USexIRL
Distribution: *nix
Posts: 849

Rep: Reputation: 30
SCO are assh*les.

THEY ARE TRYING TO DESTROY LINUX AND GPL!!!!

I would NEVER ever support them after their lawsuit on the linux kernel.

I sincerely recommend you change to FreeBSD.
 
Old 10-14-2003, 03:05 PM   #10
mossy
Member
 
Registered: Aug 2003
Location: USexIRL
Distribution: *nix
Posts: 849

Rep: Reputation: 30
Using FreeBSD you will get alot more help from forums and the like rather than SCO.

**honestly ~ if you have not invested too much time n sco already make the leap to another distro.
 
Old 10-14-2003, 03:06 PM   #11
gallet
Member
 
Registered: Aug 2003
Posts: 34

Original Poster
Rep: Reputation: 15
i mean it is not my fault if is SCO or FreeBSD i just have a problem and i need to solve it......
 
Old 10-14-2003, 03:34 PM   #12
mossy
Member
 
Registered: Aug 2003
Location: USexIRL
Distribution: *nix
Posts: 849

Rep: Reputation: 30
I know man but they are trying to take down gpl linux.

You must understand the irony of asking a linux gpl site for help with sco.

You'll prolly come acrioss this alot using that OS.

the linux community is very serious about our OS's.

But it's nothing personal on the end user's - unless they are anti-linux of course.
 
Old 10-14-2003, 03:35 PM   #13
gallet
Member
 
Registered: Aug 2003
Posts: 34

Original Poster
Rep: Reputation: 15
ok so i am goint to try in a sco forum cheers.
 
Old 10-14-2003, 03:40 PM   #14
mossy
Member
 
Registered: Aug 2003
Location: USexIRL
Distribution: *nix
Posts: 849

Rep: Reputation: 30
Ok I read your case - if SCO is letting telnet login's get by by pressing the delete key then yes it is a secutiry issue on the part of sco. Another reason to change to FreeBSD.

Besides - all the apps on FreeBSD will be gpl - which is usually more cutting edge in this day and age believe it or not.
 
Old 10-14-2003, 03:41 PM   #15
mossy
Member
 
Registered: Aug 2003
Location: USexIRL
Distribution: *nix
Posts: 849

Rep: Reputation: 30
I hope I did not offend you.

mossy
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Sco Unix thiyagu4u Other *NIX 11 05-02-2005 06:09 AM
SCO vs Novell - SCO claims ownership to UNIX Ephracis General 5 10-02-2004 03:55 PM
sco unix mannyfresh Linux - Software 2 06-17-2004 02:17 PM
sco unix mannybabe Linux - Hardware 0 08-04-2003 07:27 PM
Telnet to SCO UNIX Tuna762 Linux - Newbie 1 05-08-2001 05:16 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:36 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration