Problems with SSH / telnet - Page 3

Neo · #15 (**permalink**) 10-17-2008

Quote:

Originally Posted by shockneck

T If nobody at your datacenter can name exactly where this additional security compared to the current version of OpenSSH is you might consider using OpenSSH instead. Reason is that you will get faster and better response to questions related to a product that is widely used compared to some niche product.

I agree. If there is no bone fide security reason not to use OpenSSH, then the poster is better to switch, because he will have open support.

bakunin · #16 (**permalink**) 10-17-2008

I checked with a colleague who happened to know the Tectia product: the difference is that normal ftp can provide a chrooted environment for every user, but the sftp can't do that, at least not out of the box, while Tectias sftp does have this functionality.

This might be perceived as being "more secure" to people who have no idea at all how ftp really works, which is, sad to say, quite often the case in auditing teams who in turn come up with some some "security-enhancement" which in fact is just plain silliness. I have once heard a default umask of 777 mentioned as desirable from such folk. Its usually the administrators who have to suffer from these, ahem, ideas.

Sorry, this won't help you with your problem but now i feel some relief. ;-))

bakunin

PS: I strongly suggest that you find out if this functionality is really needed at all in your case and if it isn't (which is most likely the case) you switch to openSSL products as suggested by Neo and shockneck. And i hop this helps.

bakunin

vbe · #17 (**permalink**) 10-17-2008

Isnt the product trying to open some closed/filtered port you know like above 9000 after having used 443 ?

Just thoughts...

Hille · #18 (**permalink**) 10-22-2008

Thanks for the replies. I think that the root user doesn't use his .profile and /etc/profiles files and therefore can't login to the server. All of the permissions however are correct (just like in other boxes). I've checked many things together with my collegue but nothing came out of it. It's a very strange error in the system..

bots · #19 (**permalink**) 11-12-2008

hey,

I'm not sure of this particular version/type of ssh.. I use open ssh on AIX.. have u tried checking the entries in /etc/ssh/sshd_config?

in a fully implemented ssh environment, there should be a user@server entry under the AllowUsers key?. If you make a change to this file, the ssh demon needs a restart too.

cheers.

csorhand · #20 (**permalink**) 11-16-2008

Hille,

Have you tried setting the permission of your /home to 700.? I have strange encounters with ssh that user root can't login. Tried setting world writeable to 777 but it doesnt work. Tried 700 and the systems works.

ghp · #21 (**permalink**) 12-11-2008

Quote:

Originally Posted by Hille

This is the output of lsuser root.

root id=0 pgrp=system groups=system,bin,sys,security,cron,audit,lp,exploit home=/ shell=/usr/bin/ksh auditclasses=general login=true su=true rlogin=true daemon=true admin=true sugroups=ALL admgroups=<all groups> tpath=nosak ttys=ALL expires=0 auth1=SYSTEM auth2=NONE umask=22 registry=files SYSTEM=compat logintimes= loginretries=0 pwdwarntime=0 account_locked=false minage=0 maxage=0 maxexpired=-1 minalpha=0 minother=0 mindiff=0 maxrepeats=8 minlen=0 histexpire=0 histsize=0 pwdchecks= dictionlist= fsize=-1 cpu=-1 data=-1 stack=-1 core=4194302 rss=65536 nofiles=20000 fsize_hard=-1 cpu_hard=-1 data_hard=-1 stack_hard=-1 time_last_login=1223971121 time_last_unsuccessful_login=1224082704 tty_last_login=/dev/pts/11 tty_last_unsuccessful_login=/dev/pts/0 host_last_login=<all servers> host_last_unsuccessful_login=server2 unsuccessful_login_count=13 roles=

The 'host_last_login' is kind of strange though because every server is listed, normally there is only 1 or so? It's like every server tried to connect at the same time, not certain though if it has anything to do with the problem.

The host_last_login is the cause of your problems, the entry is too long. Clean your /etc/security/lastlog. Probably caused by an entry in /etc/hosts with too many aliases.

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
Running Script from Telnet - Problems	pauljohn	UNIX for Dummies Questions & Answers	1	10-03-2006 01:58 PM
Problems with telnet.	cordobapablo	UNIX for Dummies Questions & Answers	2	10-17-2005 10:22 AM
Problems with Telnet	Lestat	UNIX for Dummies Questions & Answers	1	07-22-2005 06:28 PM
Unix SCO 5.0.6 Telnet Problems	josramon	UNIX for Dummies Questions & Answers	2	03-09-2004 06:28 PM
SCO openserver 5.0.6 Telnet Problems	josramon	UNIX for Dummies Questions & Answers	6	06-05-2003 10:11 AM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread: