topic Re: Telnet Logon Message in Operating System - HP-UX

Telnet Logon Message

Thomas Lawton — Thu, 24 Jul 2003 15:40:58 GMT

How do I change the message when I logon to telnet, I can find the copyright and issue file etc but I cannot find any script or such that makes the server dump this when telnet is accessed:

Unauthorised access or use of this system is strictly prohibited.

UNAUTHORISED ACCESS TO OR MISUSE OF A COMPUTER CONSTITUTES AN OFFENCE
UNDER THE COMPUTER MISUSE ACT 1990.

login: webuser
Password:
Please wait...checking for disk quotas

[THIS IS THE BIT:]
British Telecommunications PLC

WARNING: You have accessed the MRMESSY2 system operated by BT. You are required
to have a personal authorisation from the system administrator before you use
this computer and you are strictly limited to the use set out in that written
authorisation. Unauthorised access to or misuse of this system is prohibited
and constitutes an offence under the Computer Misuse Act 1990. Unauthorised
access to information is defined in Security Policy 3-11 Password and User ID
Management, found at http://security.intra.bt.com/

If you disclose customer or BT information without authority you may be sacked
and prosecuted.

Are you authorised to use this computer as detailed above? (YES/NO): yes

[THATS IT]
(c)Copyright 1983-1996 Hewlett-Packard Co., All Rights Reserved.
(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California
(c)Copyright 1980, 1984, 1986 Novell, Inc.
(c)Copyright 1986-1992 Sun Microsystems, Inc.
(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology
(c)Copyright 1989-1993 The Open Software Foundation, Inc.
(c)Copyright 1986 Digital Equipment Corp.
(c)Copyright 1990 Motorola, Inc.
(c)Copyright 1990, 1991, 1992 Cornell University
(c)Copyright 1989-1991 The University of Maryland
(c)Copyright 1988 Carnegie Mellon University

RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the U.S. Government is subject to
restrictions as set forth in sub-paragraph (c)(1)(ii) of the Rights in
Technical Data and Computer Software clause in DFARS 252.227-7013.

Hewlett-Packard Company
3000 Hanover Street
Palo Alto, CA 94304 U.S.A.

Rights for non-DOD U.S. Government Departments and Agencies are as set
forth in FAR 52.227-19(c)(1,2).

mrmessy2:

Please help! I really am stuck.

Re: Telnet Logon Message

Pete Randall — Thu, 24 Jul 2003 15:45:46 GMT

Thomas,

I'm not sure if this is exactly what you're looking for, but info on telnet banner(s) is available here:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xbc640ea029a2d711abdc0090277a778c,00.html

Pete

Re: Telnet Logon Message

Michael Elleby III_1 — Thu, 24 Jul 2003 15:47:12 GMT

A shot in the dark, but have you looked at /etc/motd?

Mike-

Re: Telnet Logon Message

S.K. Chan — Thu, 24 Jul 2003 15:49:16 GMT

The telnet banner defined in /etc/inetd.conf (the line "telnet") display the message BEFORE you log in. After you log in, typically /etc/motd is issued to display the "after log in" message and this is defined in /etc/profile (normally). Check your global profile (ie /etc/profile). What you see here should be scripted in that file.

Re: Telnet Logon Message

Thomas Lawton — Thu, 24 Jul 2003 15:52:50 GMT

Thanks for the link! It has helped me understand more about telnet but the message is still there.

Thanks for your help though,

Thomas

Re: Telnet Logon Message

Steven E. Protter — Thu, 24 Jul 2003 15:54:29 GMT

Usually its /etc/issue

defined in inetd.conf

But that pops up before login.

I'd look in /etc/profile if all users are getting it.

.profile if its just some.

SEP

Re: Telnet Logon Message

Steven E. Protter — Thu, 24 Jul 2003 15:54:30 GMT

Usually its /etc/issue

defined in inetd.conf

But that pops up before login.

I'd look in /etc/profile if all users are getting it.

.profile if its just some.

SEP

Re: Telnet Logon Message

someone_4 — Thu, 24 Jul 2003 15:56:52 GMT

Hi
check

/etc/profile

/etc/copyright

Richard

Re: Telnet Logon Message

Caesar_3 — Thu, 24 Jul 2003 20:05:32 GMT

Hello!

in /etc/inetd.conf line of telnet made this: ...... telnetd -b
and write message to

In the end you need that inetd will run with
new changes so run: inetd -c

Caesar

Re: Telnet Logon Message

Bill Hassell — Fri, 25 Jul 2003 00:27:12 GMT

The first thing to do with a new system is to change /etc/issue (which has a Generic system message). For security purposes, do *NOT* use:

uname -a > /etc/issue

as it provides far too much information *prior* to login authentication. Instead, put your basic legal stuff and perhaps the name (but nothing else) of the computer. Then make 2 changes in /etc/inetd.conf:

...telnetd -b /etc/issue
...rlogind -B /etc/issue

then run: inetd -c to update inetd.

Esentially, you would split your warnings into two parts: pre-login and post-login. The post-login message is for users that are authenticated (or may have stolen a password). Although hackers care nothing about a warning message, it does make the corporate lawyers feel better.

To see where this message is located, look in /etc/profile. Usually this message is /etc/motd. But any previous sysadmin might have changed /etc/profile to add another message. Try this:

grep cat /etc/profile

to see where messages are displayed.

Re: Telnet Logon Message

twang — Fri, 25 Jul 2003 00:40:31 GMT

Check 3 places to see if the message is there:
- /etc/motd
- /etc/issue
- /etc/profile and $HOME/.profile