How to re-allow telnet remote access to a HP-UX server

[Gary L]

Hi

We have few HP-UX servers (9000, HP-UX 11i v1) are changed the purpose move from DMZ to normal area. Previously, they only allow SSH remote access way, telnet was denied. But current they should be remote accessed both telnet and ssh, but so far they could not accept ssh access. How to configure it to allow telnet access.

thanks a lot.

Any answers will be very appreciate.

BTW, There is no # in the telnet line in file /etc/inetd.conf.

-G

[Steven Schweda · Accepted solution]

> [...] move from DMZ to normal area. [...]

This doesn't tell me much about how any of
your network is actually configured.

> [...] telnet was denied.

HOW? What happened when someone tried it?

> BTW, There is no # in the telnet line in
> file /etc/inetd.conf.

With my weak psychic powers, I can't see
what's in that file. As usual, actual
evidence can be more helpful than a vague
description or interpretation.

What happens (now) if you try to Telnet to
one of these systems (from some other system
on the same subnet, from an outside system,
...)?

[Gary L]

Hi Steven

Thanks a lot for your fast reply. I will try to explain more details:

We do have three HP-UX servers running HP-UX 11i v1. Previously they were located in DMZ rack and configured DMZ IP ... for secure reason they only could be remote accssed by SSH way, usual telnet port33 was denied. Execpt DMZ HP-UX servers, others could be remote accessed both telnet or ssh. This setting was done by Some else. Now, those three servers are changed purpose and are moved to normal rack. They don't need only ssh access any more. So, I want to remove that "ssh only" setting in system, but I have no idea where is the configureation file and how to re-enable telnet access. In other words, non-DMZ server should be configured as allow remoted accessed by telnet and ssh via some tools, like Putty. Now, those three only could be ssh, telnet didn't work.

[cnb]

What does the telnet line look like?


telnet stream tcp6 nowait root /usr/lbin/telnetd telnetd

Rgds,

[cnb]

Sorry I should have posted both versions:

To start telnetd from the Internet daemon, the configuration file
/etc/inetd.conf must contain an entry as follows:

telnet stream tcp nowait root /usr/lbin/telnetd telnetd

The above configuration applies only for the IPv4 environment. For
telnetd to work in the IPv6 environment, the configuration file
/etc/inetd.conf must contain a tcp6 entry as follows:

telnet stream tcp6 nowait root /usr/lbin/telnetd telnetd

Is the telnetd running?

check /etc/services for telnet service port?

telnet 23/tcp # Virtual Terminal Protocol

Rgds,

[Terry.giblin]

This link will help greatly.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=818990

IP address, user names....and modify accordingly.

Please remembering to be careful and to follow industry recognised standards and network configurations, if you don't mind.

[Gary L]

Thanks a lot buddies for your all kindly help.

I have fixed that problem via your hands, details are as follows

1. backup /var/adm/inetd.sec file

2. modified /var/adm/inetd.sec file and made it the same as other non-DMZ servers. I checked, yes there a lots of limitation there, the first entry is
telnet deny

3. took it effective via command # inetd -c

thanks again.

have a good night.

-G

[Steven Schweda]

> > [...] telnet was denied.
>
> HOW? What happened when someone tried it?

> [...] telnet didn't work.

Note for the future: "didn't work" is not a
useful problem description. Showing actual
commands with their actual output might
provide some useful information.