Deny rsh,tn,or rlogin


 
Thread Tools Search this Thread
Operating Systems AIX Deny rsh,tn,or rlogin
# 8  
Old 05-09-2013
Yes, each O/S may have nicities in how you properly remove services from listening. Usually, you deconfigure inetd but leave the services registered, in case a client wants to know the port to connect on another host.
# 9  
Old 05-10-2013
Quote:
Originally Posted by MichaelFelt
To edit /etc/inetd.conf I would recommend using the command
Code:
# smitty otherserv

If you done edit /etc/inetd.conf

you must restart the service.

Code:
#stopsrc -s inetd
#startsrc -s inetd

or refresh -s inetd

best regard

Last edited by Scott; 05-10-2013 at 01:24 PM.. Reason: Code tags
# 10  
Old 05-10-2013
Yes, generally inetd and other classic daemons will reread config if you send it the right signal with a kill, sighup I think, and the refresh thing maybe a wrapper for that.
# 11  
Old 05-12-2013
Quote:
Originally Posted by DGPickett
Yes, generally inetd and other classic daemons will reread config if you send it the right signal with a kill, sighup I think, and the refresh thing maybe a wrapper for that.
As it is, things are a little bit more complicated in AIX: most of the system services are managed by a AUX-specific piece of software called the "System Resource Controller" (SRC). It supports signal communication too (so you are partly correct), but that is not the only function.

Most services ("inetd" included) are started with "startsrc", stopped with "stopsrc", etc.. All these "*src" commands are using the SRC frontend to control service processes controlled by the SRC. Here are the most important commands:
  • startsrc starts defined services
  • stopsrc stops running services
  • lssrc lists all defined services and if they are started or not
  • refresh restarts a service (really intuitively named, LOL)

For further information here is the link to IBMs documentation about the SRC.

I hope this helps.

bakunin
# 12  
Old 05-13-2013
Yes, any daemon running under a master like src in AIX has to be managed by that master. The src ensures it is restarted if it fails, but generally a well written daemon like inetd does not.
# 13  
Old 05-13-2013
SRC subsystem is "offtopic" but what the heck :)

Since we have delved so deeply into SRC the missing commands are:

mkssys
chssys
and rmssys

The mkssys command adds a new subsystem definition to the subsystem object class. The chssys command modifies an existing subsystem definition in the subsystem object class. The rmssys command removes an existing subsystem definition from the subsystem object class.

In short, you can add/modify/remove daemons to the SRC system.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

/etc/hosts.deny

Hi there, For /etc/hosts.deny was it used to deny access from the internet? (2 Replies)
Discussion started by: alvinoo
2 Replies

2. Shell Programming and Scripting

Rlogin / RSH / SSH

Hello, I am looking for a connection method in which i can connect to a remote server but I want to have only one chance to connect to the remote server (not to be asked for iuser name and password again). If I have provided a wrong password then I want the connection to broke and be routed... (1 Reply)
Discussion started by: LiorAmitai
1 Replies

3. UNIX for Dummies Questions & Answers

RSH/rlogin problem

Hello, When I try and RSH/RLOGIN onto a box with user root, I get the prompt but the username/password combination NEVER work. I have the password up properly on the host machine. Does rsh/rlogin not make use of ./etc/passwd and /etc/shadow? (1 Reply)
Discussion started by: mojoman
1 Replies

4. UNIX for Dummies Questions & Answers

Hosts.deny entry

Hello I want to block individuals who attempt to use ssh to loggon to one of my machines from a certain IP address. I added the following entry in hosts.deny. Will the entry do what I want to do? ssh: 202.111.128.225 (3 Replies)
Discussion started by: mojoman
3 Replies

5. AIX

allow / deny root logins

Hello everyone I have to limit the root logins on my aix box (aix 5.3) I change the value on the /etc/security/user default (login and rlogin) change to false and add to root (rlogin and login = false) I tried in different ways but I got the same. Root still can login I try algo... (6 Replies)
Discussion started by: lo-lp-kl
6 Replies

6. Shell Programming and Scripting

ftp, rlogin , rcp, rsh are not wroking

Hi Friends I am facing one problem, I am not able to use ftp, rlogin , rcp, rsh in a particular server. when I am trying to ftp certain file from that server it is giving Connection closed by remote host. Now from other unix box I am not able to rlogin that particular server. as .rhosts... (3 Replies)
Discussion started by: itsjoy2u
3 Replies

7. AIX

Deny root rlogin

Hi, I have to forbid root-logins on all my servers, expect from two machines, these 2 machines login with root without a password it was quite easy with ssh, but I have a problem regarding rsh/rlogin, an there are a lot of rsh jobs, so it would take a lot of time to change all this... (4 Replies)
Discussion started by: funksen
4 Replies

8. Programming

rlogin/rsh incoming port

Hi all, In need to know why my sample code below that connect to a rlogind (513) fails, but original unix rlogin does not ? (.rhosts is verified to be correct) I heard rlogin/rsh bind to a reserved port before connecting to the rlogin server. what are they ??? s = socket(AF_INET,... (1 Reply)
Discussion started by: andryk
1 Replies

9. UNIX for Dummies Questions & Answers

Telnet deny

Hi all I'm using an AIX 5 machine. I'm trying to telnet from this machine to another Aix machine. When I use the "root" user - Everything works. I can telnet successfully the other machine When I use another user but root - I can't telnet the machine: noah@logist:/home/noah>telnet aixtst... (2 Replies)
Discussion started by: sunbird
2 Replies

10. UNIX for Dummies Questions & Answers

rsh & rlogin

I'm trying to execute the next command: " rsh CompName date " which means i want to get the date from a machine which i have its CompName. but i get the answer : "Connection refused" what do i need to do ? how can i sign myself as user or guest in the other machine ? thanks in... (2 Replies)
Discussion started by: Inbal
2 Replies
Login or Register to Ask a Question