Config Autherative host for root access

[Niraj Kumar Verma]

Hi,

I have 10 HP-UX servers, I wanted to confuigure a autherative host for root login.

I mean I wanted to allow the root login to these hp-ux servers only from the autherative host(xxx.xxx.xxx.xxx) and not from any machine ip.

Can any one help me in achiving this ??? I know OS version is not neede bet i still give some info.

========================
# uname -a
HP-UX HPHOST1 B.11.11 U 9000/800 12345678 unlimited-user license

Thanks & Regards
-Niraj

[RAC_1]

You have few options here.

1 Code in /etc/profile.
user=`LOGNAME`
ip=autherative host ip

if [ $user=root -a $ip="autherative host ip" ]
then
echo "Root allowed from $ip"
else
echo "No root login other than authorative ip"
exit
fi

2 Install tcp wrappers.

3 add telnet service as some other name. Allow this service only from authorative ip.

[Niraj Kumar Verma]

Hi Anil,

I have tcpwrapper installed,
can you specify what is the configuration of hosts.allow or hosts.deny to config the autherative host.

Thanks

-Niraj

[RAC_1]

Never used that, but it is like

service.allow ip

where service = telnet,ftp etc
allow - allow
ip allow from this ip. ALL is allow for all.

[Niraj Kumar Verma]

hi,

As per my knowledge goes i can only restrict the services which are there in /etc/services using tcp wrapper, and not the user login control.


coming to your first suggesation .profile

How do I get the IP of the machine which is doing telnet during login time ? so that I can check against my specified IP.

regarding your 3 opting , I cannot implement it because
machine is a production machine used by several users.

Thnaks for the reply.
-Niraj

[Niraj Kumar Verma]

Hello experts,

any help on my question ???

regards
-Niraj

[Niraj Kumar Verma]

Hello experts,

any help on my question ???

regards
-Niraj