topic Re: kernel parameter for sshd devices in Operating System - HP-UX

kernel parameter for sshd devices

KOGOE — Wed, 15 Mar 2006 04:16:19 GMT

I have download ssh and install it on my system HP-UX 11i v1;I would like to configure all users emulator to use ssh instead of telnet to connect to the server.There are 300 users who connect simultaneously to the system; the problem is that I'm wondering to run out off sshd devices. I would like to know the kernel paramater (as nstrtel for telnet ) to configure to have 300 sshd maximum

Re: kernel parameter for sshd devices

Muthukumar_5 — Wed, 15 Mar 2006 04:20:41 GMT

To block telnet session simply use,

configure /etc/profile as,

ps | grep -q 'telnet'
if [[ ${?} -eq 0 ]]
then
echo "Please use ssh. Telnet access is denied"
sleep 3
exit 1
fi

will do it.

--
Muthu

Re: kernel parameter for sshd devices

Arunvijai_4 — Wed, 15 Mar 2006 04:22:28 GMT

Hello,

Easy method is, comment telnetd service in /etc/inetd.conf,

#telnet stream tcp nowait root /usr/lbin/telnetd telnetd

-Arun

Re: kernel parameter for sshd devices

Muthukumar_5 — Wed, 15 Mar 2006 04:24:39 GMT

I hope no specific kernel parameter for ssh service as like telnet. See this:

http://docs.hp.com/en/939/KCParms/KCparams.OverviewAll.html

May be nstrpty, npty is needed.

--
Muthu

Re: kernel parameter for sshd devices

Arunvijai_4 — Wed, 15 Mar 2006 04:25:47 GMT

Hi,

Check this thread,

https://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=949625

-Arun

Re: kernel parameter for sshd devices

Jean-Yves Picard — Wed, 15 Mar 2006 04:34:31 GMT

Hello,

I do not think there is such things as sshd devices.

sshd man page didn't mention it.

you may run out of process, but if you already have 300 telnet user, you won't run out of process for 300 ssh user.

Jean-Yves Picard

You didn't ask for it, but since every one seems to give advice ...

see my answer on how to disable telnet with a warning message in http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1004287

Re: kernel parameter for sshd devices

Armin Kunaschik — Thu, 16 Mar 2006 04:59:20 GMT

telnet uses "telnet" devices (pts/t*). The number of therse devices is configure with kernel parameter nstrtel.
ssh uses normal pseudo terminal devices (pts/_number_)
The number of these devices is configured with the kernel parameters npty and nstrpty.

You may need to create new devices if you increase these values like
/sbin/insf -d ptym -n XX
/sbin/insf -d ptys -n XX
/sbin/insf -d pts -s XX

see man ioscan for details.

My 2 cents,
Armin

PS: Please assign points if you find answers useful!

Re: kernel parameter for sshd devices

KOGOE — Thu, 16 Mar 2006 06:34:04 GMT

ok thank u
Bye