Disabling TFTP Services for Ignite Clients ??

[avarada]

I need to know, whether we can disable "tftp" services from Ignite Clients. Is this really necessary for a client. Ignite Server should have always tftp services available to respond for a bootquery from the clients.

We are in the process of tightening the security for unix boxes, and just wondering to know the effects in disabling this tftp service from ignite clients.

Thanks for your time

[Sanjay_6 · Accepted solution]

Hi,

You can disable "tftp" on the client. We already this as part of out security compliance. This entry ios not required on the client.

Hope this helps.

Regds

[Helen French]

tftp needs to be enabled only on the server side. You can safely disable this from the client systems. Check files inetd.conf, services etc.

[Steven E. Protter]

tftp is one of the transfer protocols used for transferring Ignite images, at least the boot kernel.

WE disable tftp in both client and server by commenting out the service in /etc/inetd.conf.

When we need to boot an Ignite client, we enable it on the server. Its not needed on the client when pulling an image, its transferred to the client from the ignite image server.

SEP

[avarada]

Thanks Guys,

Now I got solid practical proofs to approach my managers for the implementation.

I really appreciate your time.

Best Regards,
Anand