topic Re: restricted telnet access in Operating System - HP-UX

restricted telnet access

Paul Barmettler — Tue, 01 Feb 2005 11:09:22 GMT

how can telnet access for a specified user be restricted?
Situation:
Server filesystem /export/TEST is already exported for everyone.

Problem:
User xxx should obtain access via telnet to directory server:/export/TEST/XXX, and must NOT be allowed to change to parent directory.

thanks for your help
Manuel Maerki

Re: restricted telnet access

Todd McDaniel_1 — Tue, 01 Feb 2005 11:37:20 GMT

Is this in regards to ftp? I know ftpaccess is an excellent way to do this exact thing.

Maybe You could make a unique group and restrict read access to the parent directory...

Re: restricted telnet access

Geoff Wild — Tue, 01 Feb 2005 11:54:18 GMT

Make sure that the file system has no world access - say 750 and that the user is not the owner nor in the group that has access to that filesystem.

Rgds...Geoff

Re: restricted telnet access

Victor BERRIDGE — Tue, 01 Feb 2005 11:56:38 GMT

Hi,
In /etc/passwd, change the login shell to /usr/bin/rksh
(REstricted ksh...)
All the best
Victor

Re: restricted telnet access

Edgar Zapata — Wed, 02 Feb 2005 05:28:43 GMT

See if this answer from T G Manikanda helps (the credit is all his):

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=230567

Also check whether the user shell is defined in the /etc/shells file.
The /etc/shell file should look like
/usr/bin/sh
/usr/bin/ksh
Add the user's login shell here.

regards.

Re: restricted telnet access

Shantaram Sahyadri — Wed, 02 Feb 2005 05:35:03 GMT

Hi,

I had a similar requirement, this is what i did to solve it, there might be better ways of doing it,

in the /etc/passwd file where the login shell is defined I redefined it with another scrip which forks the shell for the user with chroot command. after doing this the user logs in but cannot change directory to a higher level than the users loging directory.

Cheers
Shantaram