Login problem

[Yvonne Chan]

Currently, I am using SAS connect to login to HP server via a port 5500. Instead of the normal telnet port 22 to login to the HP N4000 server v11.0. However, HP is not able to track that the users had login to the server. Therefore if the user account is being deactivated or password expiry, he can still login to the server. Please advise how is HP able to track the users who had login to the server.

[harry d brown jr]

Yvonne,

If the users are not actually logging in, which in this case they are not, because SAS is controlling port 5500, and not "telnetd".

There isn't much you can do, other than "extend" the period of inactivity on their accounts.

It's really no different than a user with a PC connecting to a database via an application, through let's say sqlnet. They authenicate to the Database, but not to the system as a logged in user.


live free or die
harry

[Trevor Dyson]

Not sure if this helps but:

netstat will show which hosts are connecting to port 5500 on your server.

Also you can restrict which hosts can connect to port 5500 if SAS uses /etc/inetd.conf to launch servcies on this port. This is done through /var/adm/inetd.sec.

This does not help with user level authentication though. Does SAS itslef authenticate users connecting on port 5500?

[Yvonne Chan]

I had added the port 5500 (spawner) into my inetd.conf file.
spawner stream tcp nowait root /usr/lbin/telnetd telnetd -l
And restart inetd -c but it is still not able to track the user.
SAS login prompt is username: password: Hello>

Any advise?

[Steven Sim Kok Leong]

Hi,

Is your system trusted? If I recall correctly, there might have been some older versions of SAS (for version < 6.12) that have issues with TCB.

Hope this helps. Regards.

Steven Sim Kok Leong