disable telnet on HPUX

[chad_c]

Hi. Can anyone shed some light on how to disable telnet on an HPUX 11.11 server?

Regards,
Chad

[Prashanth.D.S · Accepted solution]

Hi Chad,

I guess by editing the file /etc/inetd.conf you can disable the telnet access..

check for the below line and hash it..

telnet stream tcp6 nowait root /usr/lbin/telnetd telnetd

Best Regards,
Prashanth

[Sanjay Yugal Kishore Ha]

You can also specify the hosts which can use/not use telnet service in the /etc/hosts.allow.

HTH,
Sanjay

[Prashanth.D.S]

Hi Chad,

Another option is to convert system to trusted by issuing the below mentioned command, but by this you can login to the server only from the console and no where else..

Converting the system into a "Trusted System"

Use the supplied tsconvert command to convert the system into a trusted system. A sample output is provided. Immediately after convertingâ ¦ change the root password as the tsconvert command ages all passwords. The output of the tsconvert command follows:

/usr/lbin/tsconvert

Creating secure password database...
Directories created.
Making default files.
System default file created...
Terminal default file created...
Device assignment file created...
Moving passwords...
secure password database installed.
Converting at and crontab jobs...
At and crontab files converted

After converting the system I always stop root access from any other place than the console. This goes hand-in-hand with the physical security of the machine. If unauthorized individuals donâ t have physical or "virtual" access to the machine, the less damage that that person can deliver. To eliminate the root access simply touch the file /etc/securetty and chmod that file to 400.

Best Regards,
Prashanth

[Bill Hassell]

Edit the file /etc/inetd.conf, and put # in front of the telnet line like this:

# telnet stream tcp6 nowait root /usr/lbin/telnetd telnetd

Then signal inetd to read the new file:

inetd -c

Verify that the change was seen:

tail /var/adm/syslog/syslog.log

[chad_c]

.