disabling "telnet -l" and "rlogin -l"

[niemingxin_1]

I am unsure if anyone has this kind of requirement before. We don't want to disable the whole telnet or rlogin services. But we just want to disable "telnet -l" and "rlogin -l"

The suituation we are facing is that we have oracle server installed on our HP-UX with user oracle. We have several oracle DBAs and they all know the password of oracle and they tend to use "telnet -l oracle" and "rlogin -l oracle" to connect. This is out of control and we cannot trace who connect using oracle account.

So we want to disable "telnet -l" and "rlogin -l" so the DBAs can only telnet or rlogin using their own account then su to oracle. In this way we can audit who su to oracle. So any suggestions or solutions??

[Robert-Jan Goossens]

Hi,

Check Duncan's comments in this thread,

http://forums1.itrc.hp.com/service/forums/parseCurl.do?CURL=%2Fcm%2FQuestionAnswer%2F1%2C%2C0x7924cbaac6dcd5118ff40090279cd0f9%2C00.html&admit=716493758+1084129312867+28353475

Hope this helps,
Robert-Jan

[Steven E. Protter]

same thing cut and paste mode

vi /etc/inetd.conf

comment out the line that says telnetd in it.

Comment out all lines that have the rexec , etc protocols

save

inetd -c

Done.

SEP