/etc/securetty does not work with ssh installed ( port 22 ) ???

[Juan Manuel López]

Hi all.
I have got several machines HP UX with 11.0 O.S., trusted system activated, and hp ssh installed. Now telnet is on port 22.
I would like to lock root login, just on console.
I had created the /etc/securetty file with console word on it.
So, I can login as root without problems...What I have done wrong ?

Juanma.

[Ted Ellis_2]

any chance you are using tcp_wrappers with ssh?

[Tony Contratto · Accepted solution]

In the sshd_config file change "PermitRootLogin yes" to "PermitRootLogin no"

Tony

[Juan Manuel López]

The ssh software I am ussing is :
T1471AA A.03.10.001 HP-UX Secure Shell

What??s tcp_wrappers ?
Is a tcp parameter, isn??t it ?

Juanma.

[Tom Maloy]

tcp_wrappers is a package that you can install to "wrap" around other daemons, adding a level of security. After installation, you make changes to entries in /etc/inetd.conf. For example:

ftp stream tcp nowait root /usr/lbin/tcpd ftpd -l -a

In this case, tcpd is started first. Then, after it is satisfied that this is a legitimate request, it launches ftpd.

Tom

[Juan Manuel López]

Now it works fine.
Thanks.

Juanma.