topic Re: Block the users in rlogin? in Operating System - HP-UX

Block the users in rlogin?

unixguy_1 — Sat, 28 Feb 2009 05:10:52 GMT

Hi,

How to block the user in Rlogin?

pls guide me somthing about that.

Re: Block the users in rlogin?

AZayed — Sat, 28 Feb 2009 08:20:58 GMT

Hi,

Kindly check : http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1235809065315+28353475&threadId=717877

Re: Block the users in rlogin?

Asif Sharif — Sat, 28 Feb 2009 08:38:58 GMT

Please see the below threads,
http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1235810097312+28353475&threadId=934175
http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1235810106549+28353475&threadId=863595

Regards,
Asif Sharif

Re: Block the users in rlogin?

Gokul Chandola — Sat, 28 Feb 2009 08:42:57 GMT

Hi,
Use SAM - GUI tool for HP-UX.

There is the option for Allow / Block rlogin.

Regards,
Gokul Chandola

Re: Block the users in rlogin?

Johnson Punniyalingam — Sun, 01 Mar 2009 12:28:11 GMT

Hi Unixguy,
>>How to block the user in Rlogin?<<

As you can see there are special ways of banning users:
- inetd.sec
All of the internet services controlled by inetd (including telnet
and rlogin) have their access controlled by the security file
/var/adm/inetd.sec. To restrict or allow particular access, specifically list the service to be restricted, denied, or allowed. Then list specific IP addresses for individual hosts or use network addresses to deny or allow entire networks. Check the man pages on inetd.sec for more information on the
format of the file. The following is an example that will allow everything on
the 15.56 subnet and the single host 192.13.12.1 to telnet in.
Telnet sessions from all other hosts will be denied: telnet allow 15.56.* 192.13.12.1

- Users profile:
modify the users .profile in his home-directory
- /etc/profile
Make a file with a list of users you want to deny. Then modify the /etc/profile to check this file first and then log them off with a message. This you can do when you don't or not able to change the password file.

Thanks,
Johnso