topic Re: Disabling Telnet in Operating System - HP-UX

Disabling Telnet

Bob Ferro — Thu, 15 Apr 2004 15:16:09 GMT

I added an entry in /var/adm/inetd.sec in one server as follows:

telnet allow 166.20.244.127 spdtech

I am able to telnet to this server and no one else can. I added an entry in /var/adm/inetd.sec in another server as follows:

telnet allow 166.20.244.127 spdtest

I am not able to login in. What did I miss?

P.S. I have a static ip.

Re: Disabling Telnet

Hazem Mahmoud_3 — Thu, 15 Apr 2004 15:36:03 GMT

First make sure you can access the server across the network (ping). Maybe the server is on a different subnet or something.
Also compare the files /etc/inetd.conf on both servers. You should have a telnet entry in there.

-Hazem

Re: Disabling Telnet

Steven E. Protter — Thu, 15 Apr 2004 15:51:07 GMT

Attaching an example inetd.sec file that might help.

SEP

Re: Disabling Telnet

sinhass — Thu, 15 Apr 2004 19:47:37 GMT

Pls run inetd -c and try again.

-sinhass

Re: Disabling Telnet

Michael Tully — Thu, 15 Apr 2004 20:34:22 GMT

telnet can only be disabled in two places:

/etc/inetd.conf (disables telnet completely)
/var/adm/inetd.sec (disables subnets and actual ip addresses)

After making changes to /var/adm/inetd.sec does not need to have an inetd -c run after. This is only for /etc/inetd.conf

Re: Disabling Telnet

Sanjiv Sharma_1 — Thu, 15 Apr 2004 20:54:28 GMT

Hi Bob,

Please check this link:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=261206

Re: Disabling Telnet

Bharat Katkar — Fri, 16 Apr 2004 02:08:23 GMT

Login thr' console on another server and check following:

# telnet 127.0.0.1

This should give you a login prompt.
This will confirm whether telnet itself is working properly on your another server.

In case if it work, then you need to check inetd.sec file for any errors.

Re: Disabling Telnet

Bob Ferro — Fri, 16 Apr 2004 08:05:26 GMT

Thanks to everyone for all the help. I have one more problem. Some users need to telnet into the system via dialup. Some internal users need to telnet (no static ip for these guys). My question is there anyway to allow users other than using the ip address? Say by user name?