topic Re: Telnet access restrict in Operating System - HP-UX

Telnet access restrict

Massimo_20 — Tue, 15 Jul 2003 09:19:45 GMT

how to restrict users to navigate when connected with telnet?????

Re: Telnet access restrict

Ollie R — Tue, 15 Jul 2003 09:26:41 GMT

Hi,

You mean like with a restricted shell?

Change the user's login shell to "/bin/rsh".

Ollie.

Re: Telnet access restrict

Massimo_20 — Tue, 15 Jul 2003 09:35:29 GMT

sorry but the question is another: the user can not navigate with cd command but also can not list or rename or copy or ... any file in another directory different from his home directory. I want that the home directory for the user will become his root directory.
Thank in advance!

Re: Telnet access restrict

Ollie R — Tue, 15 Jul 2003 09:38:35 GMT

Hi,

Well, you can use the "chroot" command, but take note that all executables must be available using the new directory as root.

For example, if you want the user to be able to run "ls", you will have to copy the file "/sbin/ls" to "~/sbin/ls"

Other than that, you'll have to rely on standard Unix security.

Ollie.

Re: Telnet access restrict

Massimo_20 — Tue, 15 Jul 2003 09:45:53 GMT

ok,
but where i must set the chroot from this user??? I tried to use the chroot command, but i don't know how to use chroot command.
The standard chroot man command use:
chroot directory command
Have you some information about chroot???
Thanks a lot!!!

Re: Telnet access restrict

Ollie R — Tue, 15 Jul 2003 09:56:26 GMT

Hi,

According to the chroot(1m) manpage, "This command is restricted to users with appropriate privileges." Looks like you can't use this option just like that.

However, if you check the manpage for "login(1)", you'll find this reference about the "/etc/passwd" file: "If the command name field is *, a chroot() to the directory named in the directory field of the entry is performed. At that point, login is re-executed at the new level, which must have its own root structure, including a /usr/bin/login command and an /etc/passwd file."

Hope this helps,

Ollie.

Re: Telnet access restrict

Massimo_20 — Tue, 15 Jul 2003 11:30:53 GMT

The solution is near!!!!!!!
I copied the /etc/passwd file, the /usr/bin/login and some library in the user roort dir, in the right paths!
Now there is a problem: when the user logged in the subsystem, it ask me a new login....
..
What's the meaning???

Thanks!

Re: Telnet access restrict

Ollie R — Tue, 15 Jul 2003 11:44:45 GMT

Hi Massimo,

I think this is correct. If you read the "login" man page it says it gets a login again. I presume it looks for passwords in the new chroot-ed /etc/passwd file.

Ollie.

Re: Telnet access restrict

Massimo_20 — Tue, 15 Jul 2003 11:50:36 GMT

Hi Ollie,

also I think this is correct. I create the /etc/passwd file, but the system not find the user login. The login man page is poor of information about this.

Now i try another!!!

Thank you very much.

Ciao

Re: Telnet access restrict

Enrico P. — Tue, 15 Jul 2003 12:37:44 GMT

Hi Massimo,
don' t forget to assign point who helped you!!! :)

Enrico