Getting no "login:"

[Pocius Arturas]

Hi,
Recently on HP-UX 10.20 (all was OK through years) we have problem with login using telnet:
user can't see "login:", but getting only "Password:"
and so can't login to server.

Some outputs:
# tail -f /var/adm/syslog/syslog.log
Jul 2 09:44:42 big telnetd[4953]: getpid : read: Connection reset by peer
Jul 2 10:07:07 big telnetd[3401]: recv: Connection reset by peer
Jul 2 10:15:30 big telnetd[4958]: recv: Connection reset by peer
Jul 2 10:31:42 big rlogind[5467]: Login failure (exit(2) from login(1))
Jul 2 10:32:33 big named[513]: NSTATS 1057134753 1056720750 Unknown=5 A=1760 PTR=569 ANY=908
Jul 2 10:32:33 big named[513]: XSTATS 1057134753 1056720750 RR=0 RNXD=0 RFwdR=0 RDupR=0 RFail=0 RFErr=0 RErr=0 RAXFR=0 RLame=0 ROpts=0 SSysQ=1 SAns=1729 SFwdQ=415 SDupQ=6656 SErr=0 RQ=3242 RIQ=0 RFwdQ=415 RDupQ=1047 RTCP=73 SFwdR=0 SFail=22 SFErr=0 SNaAns=5 SNXD=125
Jul 2 10:36:14 big telnetd[5538]: getpid : read: Connection reset by peer
Jul 2 10:36:22 big telnetd[5537]: getpid : read: Connection reset by peer
Jul 2 10:36:22 big telnetd[5466]: getpid : read: Connection reset by peer
Jul 2 10:38:09 big rlogind[5583]: Login failure (exit(2) from login(1))
Jul 2 10:47:10 big telnetd[5762]: getpid : read: Connection reset by peer


What could hapened?
Thanks

[Massimo Bianchi]

hi,
don't know the reason, but i had similar issue when one of the network guys setup a firewall.

But, if you press a bulk key, and enter, aren't you prompted again with the "login:" prompt ?

Have you modified your banner badly ? (option -b of telnetd in /etc/inetd.conf)


Massimo

[Robert-Jan Goossens]

Hi,

Did someone change some permissions in /etc ??

Hope it helps,

Robert-Jan.

[Michael Tully]

You don't happen to have a duplicate IP address anywhere do you ??

[Pocius Arturas]

It looks like:

# telnet big
Trying...
Connected to big.tjp.klasco.
Escape character is '^]'.
Local flow control off

Password: *

Password: ********

Password: ********

Password:

Bad Password!!!
Connection closed by foreign host.

[Massimo Bianchi]

Check in /etc/inetd.conf the line for telnetd


can you post it ?


In theory, you can put the right number of control chars and masquerade the login..

Just to tear away any doubt.

Massimo

[Umapathy S]

Hi,
Can you try in the telnet shell.

telnet> open big

Did it comeback the same way?

-Umapathy

[Zeev Schultz]

1)Does it happens with any user or root user only?If root only - check /etc/securetty
2)Does it happen with telnet or also with rlogin,remsh etc?
3)Can use nettl,netfmt (or tcpdump/ethereal) to
trace session.
4)Check LAN settings/interfaces.lanadmin,netstat -an (see if there some IP conections from the place you're connecting)

Zeev

[Pocius Arturas]

rlogin also not connecting

# telnet big
Trying...
Connected to big.tjp.klasco.
Escape character is '^]'.
Local flow control off

Password: *

Password:

Password:

Password:

Bad Password!!!
Connection closed by foreign host.
#
# rlogin big
rcmd: connect: big.tjp.klasco: Connection refused

[Sanjiv Sharma_1]

Seems to me as a duplicate IP Address:

Check this post:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x38efe822e739d711abdc0090277a778c,00.html

hth.