topic Re: Using sub-login feature of login in Operating System - HP-UX

Using sub-login feature of login

Paul Wahner — Wed, 09 Feb 2005 12:09:50 GMT

I'm trying to implement the procedures described in the document: S1100003443 - Sys Adm: Using sub-login feature of login(1)on HPUX 11.00

When I try to test it I get kicked off immediately with the message "Connection closed by foreign host."

I'm trying to do this on a 11.11 system. Can I do that? Is there something else beside the script I have to do?

Thanks!
Paul

Re: Using sub-login feature of login

Steven E. Protter — Wed, 09 Feb 2005 12:34:05 GMT

Looks like a firewall is shutting you down.

Could be between you and the host, or on the host, ipfilter.

Other possibilities /var/adm/inetd.sec

SEP

Re: Using sub-login feature of login

Paul Wahner — Wed, 09 Feb 2005 13:23:33 GMT

Don't have a firewall. I can login as a normal user between systems and the only entry in inetd.sec is "dtspc allow"

Re: Using sub-login feature of login

RAC_1 — Wed, 09 Feb 2005 14:17:50 GMT

What exactly are you doing?? Which user id you use??

Anil

Re: Using sub-login feature of login

Paul Wahner — Thu, 10 Feb 2005 08:00:47 GMT

At this point I'm just trying to test the concepts of the document I mentioned by telneting to the host from another system and logging in as the user I created for this purpose. Ultimately my goal is to duplicate a setup I had on my 10.20 systems where users would dialin to a chroot'ed environment strickly for the purpose of pulling canned data. I can't use any other methods because I have a closed network.

Paul

Re: Using sub-login feature of login

Henk Geurts — Thu, 10 Feb 2005 08:27:03 GMT

Paul

On the server you try to connect to, edit
/var/adm/inetd.sec
add
telnet allow

then
# inetd -c

And retry..
Let me know.
regards

Re: Using sub-login feature of login

Paul Wahner — Thu, 10 Feb 2005 09:28:24 GMT

Henk,
Made the change you suggested but still no joy. I can telnet to the server from any other system as any other user with no problems. When I telnet to the system and try to login as the user created with the sub-login then I get the "Connection closed by foreign host." message. I also tried copying inetd.sec with the telnet allow into the var directory created by the script but this didn't help either.

Thanks.

Re: Using sub-login feature of login

Henk Geurts — Thu, 10 Feb 2005 10:19:53 GMT

Paul
all items i found using Google for the use of sub-login all relate only to ftp.
it looks like a no-go using telnet.....

regards..

PS if your mentioned doc is on the net can you pass the url ??

Re: Using sub-login feature of login

Paul Wahner — Thu, 10 Feb 2005 10:37:47 GMT

The link to the mentioned document from the technical knowledge base:
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&admit=-682735245+1108049361885+28353475&docId=200000063210548