topic not login by using telnet in Operating System - HP-UX

not login by using telnet

S.S. — Wed, 10 Mar 2010 09:23:00 GMT

Hi,

For one of my server i was unable to login by using telnet session as even though i have given right userid and password also. There is no problem when i supplied the same userid and password by using ssh protocol.
May i know what will the problem?

Thanks!

Re: not login by using telnet

Horia Chirculescu — Wed, 10 Mar 2010 09:27:28 GMT

Hello,

> There is no problem when i supplied the same userid and password by using ssh protocol.

Then just forget about telnet protocol! ssh is safer, and telnet should be disabled as it send passwords in clear over the network.

Horia.

Re: not login by using telnet

Johnson Punniyalingam — Wed, 10 Mar 2010 09:33:15 GMT

telnet, blocked,

you can also check by checking on the

/etc/inetd.conf
/etc/services

Re: not login by using telnet

S.S. — Wed, 10 Mar 2010 09:39:20 GMT

Hi,

We have checked the /etc/inetd.conf file and we specifically not disabled this service as this is needed for our operation.

Please find the telnet service in /etc/inetd.conf file:

telnet stream tcp nowait root /usr/lbin/telnetd telnetd -b /etc/issue

The banner is working but when i supplied my authentication it displayed the message like login failed.

Thanks!

Re: not login by using telnet

S.S. — Wed, 10 Mar 2010 09:42:47 GMT

Also, checked the file /var/adm/inet.sec file and the telnet service is allowed.

Thanks!

Re: not login by using telnet

Horia Chirculescu — Wed, 10 Mar 2010 09:57:29 GMT

Please post here the result of a telnet session.

Telnet from the local server is working? (I mean ssh to the server then telnet localhost is working?)

Horia.

Re: not login by using telnet

thatiraju — Wed, 10 Mar 2010 13:11:06 GMT

>>>>>>>i was unable to login by using telnet session as even though i have given right userid and password also. There is no problem when i supplied the same user id and password by using ssh protocol.<<<<<<<,]

Here is one cause :
Dear the problem may occur when u use the symbols like $,@ ,∧ # . If u have used these symbols in your passwd your system may not allow you to login through telnet .

The SSH will be working with the same passwords.

We had the same problem too . So please try to avoid the use of these ,
We had a same problem too . I was not aware what to do exactly , but suggested not to use these letters .

Dear Expertise , Could some one tell me why this occurs when we use these symbols .

Raj..

Re: not login by using telnet

Matti_Kurkela — Wed, 10 Mar 2010 15:57:23 GMT

When the first Unix systems were developed, only the most expensive terminals had a CRT display. The rest had a printer instead.

On a printing terminal, erasing a previous character is difficult and slow to do. Therefore, the standard convention was that the "#" character meant "disregard previous character", and "@" meant "disregard the entire line and start over". For example, if a terminal printout line read:

login: mike####sam

it meant the user had first typed "mike", then erased it and typed "sam" instead.
If the other special character was used, it might have looked like this:

login: mike@
sam

The support for these functions was built into the TTY driver. The default settings for the TTY driver were standardized in "System V Interface Definition, Third Edition" (SVID3).

Even though printer terminals can now be found in museums only, the default values of the HP-UX TTY driver have not been changed. The defaults are even documented: see "man 7 termio" on a HP-UX system, and find the sub-title "Special Characters".

These same defaults are used with "pseudo-TTYs" or pty devices, which are used to emulate the interface of a real terminal when using a telnet or SSH connection... unless the telnetd or sshd daemon configures the pty device differently.

The above-mentioned two characters "#" and "@" usually cause the most trouble when logging in.

But when logging in from a console, modem line or any other serial-connected terminal, there is yet another set of special characters to consider.

"getty" is the process that monitors a serial-connected terminal and produces the login prompt. On HP-UX, the man page for getty includes this:

-----
getty also understands the ``standard'' ESS2 protocols for erasing, killing and aborting a line, and terminating a line. If getty sees the ESS erase character, _, or kill character, $, or abort character, &, or the ESS line terminators, / or !, it arranges for this set of characters to be used for these functions.
-----

Most users aren't aware of this functionality, because after the user has been authenticated, the standard login scripts will reconfigure the TTY special characters to values more suitable with less-ancient hardware.

SSH was developed in the 1990s when the network connections were already the norm. Because sshd "knows" the client-side is reasonably modern, OpenSSH initializes the pseudo-TTY with a more modern set of default values, so the characters like "#" and "@" won't be an issue with it.

MK

Re: not login by using telnet

S.S. — Thu, 11 Mar 2010 00:47:48 GMT

Dear All,

I have used only 1 capital letter and numbers in the password. There is no special character.
The same password i am using for other hosts and they are logging fine via telnet only the problem with one host.

Can anyone suggest me what will be the problem?

I have checked the inetd.conf, inetd.sec file and confirmed that the telnet service is not disabled.

Thanks!

Re: not login by using telnet

S.S. — Thu, 11 Mar 2010 01:02:13 GMT

Dear All,

I have used a test user to login via telnet and given the same password to login which i am using for my account and it was working fine for the test user.

May i know why login problem only for my account?
Please find the telnet login messages when loging using my account.

login:
Password:
Last successful login for SN95599: Thu Mar 11 08:42:32 SST-8 2010 on pts/ta
Last unsuccessful login for SN95599: Wed Mar 10 16:57:05 SST-8 2010 on pts/ta
Exceeds number of logins allowed (3) for user SN95599

Wait for login exit: ..

Connection to host lost.

Thank you!

Re: not login by using telnet

Patrick Wallek — Thu, 11 Mar 2010 01:45:23 GMT

>>Exceeds number of logins allowed (3) for user SN95599

This appears to be the problem. It thinks you are already logged in 3 times and that is the limit.

Re: not login by using telnet

S.S. — Thu, 11 Mar 2010 02:09:26 GMT

Hi Patrick,

How can we resolve this?

Thank you.

Re: not login by using telnet

Patrick Wallek — Thu, 11 Mar 2010 03:03:55 GMT

>>How can we resolve this?

Log out of some sessions, perhaps.

I believe there is a setting in /etc/default/security that can control the number of logins you are allowed. You may want to check that file as well.

Re: not login by using telnet

Johnson Punniyalingam — Thu, 11 Mar 2010 03:38:53 GMT

As adviced by >>Patrick Wallek

Check below under the security file)
parameter (NUMBER_OF_LOGINS_ALLOWED=0)in /etc/default/security

>>How can we resolve this?<<

by increasing LOGINS_ ALLOWED counts,
hope it may be "Audit Security" concern, :)

Are you supporting for any "Gov..?? Projects" usually we have these kind of settings , while handling Government Project :)

Re: not login by using telnet

madhuchakkaravarthy — Thu, 11 Mar 2010 04:11:28 GMT

hi

if ur system is trusted

then try out with

/usr/lbin/modprpw -k username

change the values in /etc/default/security.but that depends on ur setup.

if not trusted passwd -d username

if u had settings as not to accept null passwd
then use passwd -f username. u can use the -f option both in trusted & untrusted system.

Re: not login by using telnet

S.S. — Thu, 11 Mar 2010 04:43:15 GMT

Yes patrick and Johnson, you are right. we have /var/default/security file eventhough our system is converted to trusted and having the entry "NUMBER_OF_LOGINS_ALLOWED=3", so 3 times of logins allowed right.
May i know, is that i didn't exit the telnet session's properly previously? or else i tried morethan 3 times to logon?
Don't have problem when using the ssh session.

When i changed this parameter value to 0 then i am able to logon.

Re: not login by using telnet

Patrick Wallek — Thu, 11 Mar 2010 04:51:00 GMT

>>May i know, is that i didn't exit the telnet session's properly previously?

Yes, that is entirely possible.

If you do a 'who' does your username show up more than once? If so, the system still things you are logged in.

Re: not login by using telnet

thatiraju — Thu, 11 Mar 2010 05:04:30 GMT

Thanks Matti Kurkela .....I got my doubt cleared ...

Thanks a lot..

Raj..

Re: not login by using telnet

Horia Chirculescu — Thu, 11 Mar 2010 06:23:53 GMT

SS, wouldn't be better to send the info first? It is very important to understand the problem.

>Exceeds number of logins allowed (3) for user SN95599

Most of the users say "This is not working." And ask for help like this:
"Why it is not working?"

Horia.

Re: not login by using telnet

S.S. — Thu, 11 Mar 2010 08:44:33 GMT

I have understood the problem. Thank you for clearing me.

Many thanks to all reponding to my thread.