topic Re: HP-UX telnet & SSH access denied in Operating System - HP-UX

HP-UX telnet & SSH access denied

TalH — Tue, 19 Oct 2010 11:40:26 GMT

After restarting the server (HP-UX 11.31 PA RISC) yesterday, NIS users can't telnet / SSH I get: access denied

I have no problem telnet / SSH as root and then su - to NIS user.

Any idea?

Re: HP-UX telnet & SSH access denied

Michal Kapalka (mikap) — Tue, 19 Oct 2010 12:05:30 GMT

hi,

did you made some change before you restarted the system ??

mikap

Re: HP-UX telnet & SSH access denied

TalH — Tue, 19 Oct 2010 12:07:23 GMT

I restarted the system after installation of Secure Resource Partitions (SRP

Re: HP-UX telnet & SSH access denied

Steven E. Protter — Tue, 19 Oct 2010 12:20:21 GMT

Shalom,

Log on as root from the console.

ps -ef | grep sshd

Report results back here.

if you don't find anything,try /sbin/init.d/sedcsh start

SEP

Re: HP-UX telnet & SSH access denied

TalH — Tue, 19 Oct 2010 12:28:34 GMT

# ps -ef |grep sshd
root 2169 1 0 12:14:54 ? 0:10 sshd: root@pts/0
root 8699 1 0 14:58:21 ? 0:02 sshd: root@pts/1
root 11178 1 0 16:00:35 ? 0:00 /opt/ssh/sbin/sshd

# /sbin/init.d/sedcsh start
/sbin/init.d/sedcsh: Command not found.

when i logged in as root and telnet / ssh nis user@localhos i got:
Compartment access check failed: User is not authorized to login to the compartment associated with this network service.

so it's the SRP effected the system...

Re: HP-UX telnet & SSH access denied

merieux — Tue, 19 Oct 2010 13:01:09 GMT

Hi ,

sometimes sshd service is launched by sshd instead secssh . ls /sbin/init.d/*ssh* can help you . Try to restart sshd daemon

is ypbind et ypserv running ? if not restart the concerned service . ( i have no more hp-ux server whith nis installed ) . Post ls /sbin/init.d/*yp* ? if you don't find .

Who is the nis server , the server taht yoyu have restarted ?

Re: HP-UX telnet & SSH access denied

Earl_Crowder — Wed, 20 Oct 2010 13:14:13 GMT

Secure Resource Partitions is a complex product...have you read the documentation at http://www.hp.com/go/hpux-srp-docs ? After the initial installation of SRP, only root is allowed to login to the INIT compartment.

What steps have you performed after installing SRP?

Re: HP-UX telnet & SSH access denied

wentao.liuhp.com — Tue, 26 Oct 2010 06:40:40 GMT

Hi TalH:

You have to use roleadm assign user SRPLogin-init to allow NIS users access your system.

Re: HP-UX telnet & SSH access denied

TalH — Tue, 26 Oct 2010 06:50:19 GMT

How do I do it exactly?

Thanks!

Re: HP-UX telnet & SSH access denied

vishnu.khandare — Tue, 26 Oct 2010 12:22:40 GMT

Hi TalH,

Please refer below link, will solve ur query.

http://www.nmrc.org/pub/faq/hackfaq/hackfaq-28.html

Regards
Vishnu Khandare

Re: HP-UX telnet & SSH access denied

TalH — Wed, 27 Oct 2010 06:06:55 GMT

SRP - "Secure Resource Partitions" not Secure Remote Password

Re: HP-UX telnet & SSH access denied

TalH — Wed, 27 Oct 2010 10:52:03 GMT

Done it with the RBAC rules.
Thanks everyone!