how to disable and enable rlogin and CDE

[Nguyen Anh Tien]

Hi all.
I want disbale rlogin and CDE login fron specify IP or subnet on HPUX 11i.
Pls tell me how?
Thank

[Sridhar Bhaskarla · Accepted solution]

Hi,

rlogin can be easily disabled using /var/adm/inetd.sec file. Just specify the IP addresses/subnets that you want to allow. You will need to use 'login' as that is the service that allows rlogin. If you want to disable, remsh, rexec, then add 'shell' and 'exec' also. Examples are there in the file itself.

For CDE, I believe you meant X-window emulations. For that you will need to configure /etc/dt/config/Xaccess (copy one from /usr/dt/config directory) and add the lines like

!remotesys.yourdomian.com
!subdomain.yourdomain.com

to disallow access for remotesys and all the systems from subdomain.yourdomain.com domain. It shoudl have some examples already. Reset dtconfig to refresh this configuration '/usr/dt/bin/dtconfig -reset'

-Sri

[Sridhar Bhaskarla]

Hi (Again),

For inetd.sec file, you will need to refresh inetd configuration using 'inetd -c' command to make the changes into effect.

-Sri

[Petr Simik_1]

1. disabling CDE entirely:
#/sbin/init.d/dtlogin.rc stop
#vi /etc/rc.config.d/desktop
DESKTOP=""

2. you may restrict CDE to selected hosts:
#vi /etc/dt/config/Xaccess
host1
host2
*.domain.com
!*
#/sbin/init.d/dtlogin.rc reset

3. you may prevent direct root login via CDE
#vi /etc/dt/config/Xstartup (or cp from /usr/dt...)
(add folowing at the end of file)
if [ $(id-u ) = 0 ]; then
exit 1
fi

[Petr Simik_1]

regardin access from specified hosts you can use tcpwrapper


than define /etc/hosts.allow - to determine if the client is explicitly allowed access if no than /etc/hosts.deny to determine if client is explicitly denied access


Sample:
#/etc/hosts.deny
ALL :ALL - allow all hosts access all services



for more info see
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=TCPWRAP