topic Re: Cannot telnet with root login in Operating System - HP-UX

Cannot telnet with root login

Antalia — Mon, 27 Jul 2009 20:56:30 GMT

Hi all,

I have HP-UX 11.31 and I am trying to telnet and ftp to it, but it seems to deny root login. I have checked inetd.conf files and services in /etc to make sure telnet is enabled. It is actually working, but it won't log me in with my system root account. Does anyone know why I cannot telnet with root? (ftp has the same problem).

Thanks

Re: Cannot telnet with root login

Patrick Wallek — Mon, 27 Jul 2009 22:08:30 GMT

That function is likely disabled.

For telnet, check for the existence of the file /etc/securetty. If that file exists, and host the word 'console' in it, then root is ONLY allowed to log in directly from the console. The best practice is to log in with your own user id and then 'su' to root.

For FTP, check your FTP configuration file(s). /etc/ftpusers may be the file, but depending on your specific version of FTP it could be different. Disallowing root to FTP is also good security practice.

Re: Cannot telnet with root login

Vishu — Mon, 27 Jul 2009 22:14:02 GMT

Hi,

Check for /etc/securetty file, it prohibits root login from telnet. just rename or move this file will allow your root login with telnet.

and for ftp, check /etc/ftpd/ftpusers file, is root there in its list. Delete the root from the list and it will allow you to ftp as root.

Re: Cannot telnet with root login

Walt Watson — Mon, 27 Jul 2009 23:09:29 GMT

Do you have ssh on this system? If so, use the secure port 22 instead of 23 (e.g., with putty).

Re: Cannot telnet with root login

Lijeesh N G_1 — Tue, 28 Jul 2009 02:37:41 GMT

Hi,

Telnet
=======
Check /etc/securetty file is exists, if exists rename or remove the file to allow
root user to login through telnet.

#mv /etc/securetty /etc/securetty.old

FTP
=====
Check root entry in /etc/ftpd/ftpusers file, it is there remove from that.

Regards,
LIJEESH N G

Re: Cannot telnet with root login

Yogesh M Puranik — Tue, 28 Jul 2009 03:36:25 GMT

Hi Antila,

Most of the HP-UX 11 V3 versions are along with the trusted host enabled on it, which will cause for direct root login disable as well as ftp with root is disble.

This could be the reason.

++
Rgds
YMP

Re: Cannot telnet with root login

Antalia — Wed, 29 Jul 2009 11:57:03 GMT

Thanks to all of you! Removing /etc/securetty solved the problem immediately.

Re: Cannot telnet with root login

Steven E. Protter — Wed, 29 Jul 2009 11:59:48 GMT

Shalom,

You have opened up a security hole.

/etc/securetty was put there to stop root login.

Why, because telnet authenticates in clear text. That means any user on the network can learn the root password with a simple tool to sniff the network. A tool that takes less than a minute to install in a Windows system and is standard in Unix or Linux.

You want to put that file back and log on to root as follows:

1) Log on as a regular user

2) su - root

SEP

Re: Cannot telnet with root login

Jestin John Chacko — Wed, 29 Jul 2009 12:04:21 GMT

Dear stefen

Thanks for that valuable information.i had done the same thing for enabling the telnet.

Re: Cannot telnet with root login

Mel Burslan — Wed, 29 Jul 2009 12:20:49 GMT

This is sort of off-topic, but first off, using telnet for any login is a big security risk due to the fact that, the password as you type it and send it, travels on your network in clear text, open to any network sniffer to catch it. Don't use telnet at all costs. Use ssh instead.

Secondly, root account should not be accessible from any place but console and that should be a last resort login when all else fail. Logging in as root is no different than logging in as regular user and using

su -
or
sudo su -

commands. You end up with the same privileges as you login directly as root.