Rights control on server

[Henry Chua]

Hi Guys,

I am given the task to control the rights of my window terminal users when they telnet into my HPUX server. May I know what is the usual way to do this? can I group the users into different level? Is there a different for Solaris server as well?

Best regards
Henry

[Keith Bryson]

Hi Henry

Not sure if I understand your question correctly, but here are some hints:

- As long as telnet is specified in the /etc/inetd.conf file, you can use /var/adm/inetd.sec to control which IP addresses using telnet are allowed or denied access (see /usr/newconfig/var/adm/inetd.sec for a template if that file doesn't exist).

With Solaris, I have used TCP wrappers before now. This is also available for HP-UX and can be downloaded at software.hp.com.

- You can set authorised login times for users (best to use SAM to do this).

- Every user account is assigned to a group/groups - this will enable you to group users into as many groups as you like.

Give us a little more detail about what you are trying to do and we'll try and help further.

Hope that helps - Keith

[Victor BERRIDGE · Accepted solution]

Hi Henry,
When your users access via telnet no matter wht emulation they use (VT, or X) they have the rights you established in /etc/passwd and to the groups they are member of in /etc/groups other than that depends on if you granted them some privileges with restricted sam or sudo or limitations you may have configured elsewhere...
Now I know there are products out there on the market which allows finer granularity and inter-OS, you could look at http://www.symark.com/

To see if you find anything that may suit your new task (at extra cost...)

All the best
Victor