- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Login does not require password
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-11-2011 02:17 AM
тАО01-11-2011 02:17 AM
Login does not require password
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-11-2011 04:11 AM
тАО01-11-2011 04:11 AM
Re: Login does not require password
That may be what they are complaining about, however, technically the user did have to login initially to gain access. Using ssh is more secure, since it encrypts. If you have users secluded to only the boxes they are entitled access to, then you should state that in your responding report.
One thing security consultanting company reports like to do is throw up giant screams of doom and disaster to justify the ridiculous amount of money they are charging - and the only issue is remote login from a user that already justified access a server and has already logged in on another (also justified) server.
Just a thought,
Rita
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-11-2011 04:47 AM
тАО01-11-2011 04:47 AM
Re: Login does not require password
Best regards,
Horia.
Horia.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-11-2011 12:52 PM
тАО01-11-2011 12:52 PM
Re: Login does not require password
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2011 01:23 AM
тАО01-12-2011 01:23 AM
Re: Login does not require password
I have disabled the entry and asked the security personnel to scan the server and provide the updated report. will wait for that and let you guys know. Thanks for your replies.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-12-2011 08:01 AM
тАО01-12-2011 08:01 AM
Re: Login does not require password
It is really best to just disable rlogind and rexecd in inet.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО01-19-2011 04:11 AM
тАО01-19-2011 04:11 AM
Re: Login does not require password
We use ERM to logon to the servers.
A question to all,
I have some queries pertaining to security risk of this item.
1. How could external / internal users exploit this risk if they were aware about this entry is enabled in /etc/inetd.conf
2. In the normal login procedure using ERM would the user have noticed ├в ├в Now I don├в t need to use password anymore!├в