|
|
Sponsored Content
Special Forums
Cybersecurity
One Question about security
Post 302074226 by tayyabq8 on Monday 22nd of May 2006 01:26:14 AM
05-22-2006
Yeah, I can still su-->root on any terminal, how to stop that.?
About ssh, I'm still checking with my application provider. From above discussion:
So I have concluded that I should not continue with telnet anymore and if ssh is not possible then I'll obviously go for VPN but not for an open telnet method.....
I'm planning to use ssh for remote access only and continue with telnet from local computers, that should be fine?
One stupid question here: Is it possible that my KCML client which uses telnet might be using its own encryption method with the telnet tunnel and decrypt the data at KCML server end which is located at UNIX box? Why I'm asking this question here not to my software provider because I just want to confirm if this is possible and I don't want to give those guys a chance of thinking me as a stupid
Pls confirm the possibility.
Thanks for all your replies.
Best Regards,
Tayyab
About ssh, I'm still checking with my application provider. From above discussion:
Quote:
You may lock all of your valuables in your house, but if you leave your front door wide open...
I'm planning to use ssh for remote access only and continue with telnet from local computers, that should be fine?
One stupid question here: Is it possible that my KCML client which uses telnet might be using its own encryption method with the telnet tunnel and decrypt the data at KCML server end which is located at UNIX box? Why I'm asking this question here not to my software provider because I just want to confirm if this is possible and I don't want to give those guys a chance of thinking me as a stupid
Pls confirm the possibility.Thanks for all your replies.
Best Regards,
Tayyab
|
|
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I have a Postfix mail server running on my eMac, and been looking at /var/log/mail.log.
I am new to administrating a mail server.
I notice some servers tried to relay messages to unkown recipients in my server, and my Postfix denied access. The "from" and "rcpt to" look very phony.
I did a... (3 Replies)
Discussion started by: fundidor
3 Replies
2. UNIX for Dummies Questions & Answers
Can other users delete / replace this file if the directory and file have the following permissions
/test drwxrwxrwx
/test/file _rw_r__r__
I guess what I really want to know is what the security riskis of having teh directory completely open when the access to a particular file is... (3 Replies)
Discussion started by: OBCCBIP
3 Replies
3. UNIX for Dummies Questions & Answers
I just wanted to know when dealing with key loggers, What would be a normal routine for searching them out. I really don't know what I am looking for other than odd process. Also packet sniffers. What are signs? (0 Replies)
Discussion started by: blanks
0 Replies
4. UNIX for Dummies Questions & Answers
question deleted, because answered (2 Replies)
Discussion started by: kasa
2 Replies
5. Solaris
Hi,
I have a question about the Java that comes with the Solaris 9/10 OS.
All my boxes are servers, only ssh allowed, no x windows, hardened, firewaled, etc...
Their purpose is Oracle DB's and Sun One Dir servers. None of which use the OS version of Java as far as know.
Question IS, can... (1 Reply)
Discussion started by: BG_JrAdmin
1 Replies
6. UNIX for Dummies Questions & Answers
In an effort to adapt to best security practices, it has been suggested that a number of scripts that are going to be distributed to multiple machines across an internal network use be modified to replace instances of rsh and rcp with openSSH ssh and scp. Since there are so many references to rsh... (1 Reply)
Discussion started by: jasondj
1 Replies
7. Cybersecurity
This may seems simple but I am unaware of this.
Is there anyway to fetch the date & time of a user ID created on AIX? (actually I need answer for HP-UX,Solaris & Linux as well. But AIX is what I am most interested in.)
I use ls command but it does not show the creation date. It just shows the... (2 Replies)
Discussion started by: raj100
2 Replies
8. Cybersecurity
Hello everyone ,
I want to implement a new firewall, detection system on my network composed of some 200 computers as follows: The fire wall would be a linux box with router, L7 iptable and also snort as IDPS system. These are my questions:
1. Is there any security consideration regarding... (0 Replies)
Discussion started by: ahmedkamel
0 Replies
9. Cybersecurity
Hi,
Recently my has been hacked. A .pl script has been uploaded in the root of the directory, which uploaded lot of unwanted files and changed their file permission to 777.
I have no clue how did they upload that .pl file in my hosting.
Website is in shared hosting. Could they access my web... (3 Replies)
Discussion started by: agriz
3 Replies
10. AIX
Recently the network auditor found a security hole at port 50000. The port 50000 is used by db2.
When I enter command "netstat -Aan |grep 50000", it showed some established connections and are all db2 processes.
I have asked the application team and they answered that the port 50000 connection... (2 Replies)
Discussion started by: skeyeung
2 Replies
LEARN ABOUT SUNOS
delete-connector-security-map
asadmin-delete-connector-security-map(1) User Commands asadmin-delete-connector-security-map(1) NAME
asadmin-delete-connector-security-map, delete-connector-security-map - deletesthe named security map for the given connector connection pool SYNOPSIS
delete-connector-security-map --user admin_user [--password admin_password] [--host localhost] [--port 4848] [--secure|-s] [--passwordfile filename] [--terse=false] [--echo=false] [--interactive=true] --poolname connector_connection_pool_name mapname Deletes the named security map for the given connector connection pool. This command is supported in remote mode only. OPTIONS
--user authorized domain application server administrative username. --password password to administer the domain application server. --host machine name where the domain application server is running. --port port number of the domain application server listening for administration requests. --secure if true, uses SSL/TLS to communicate with the domain application server. --passwordfile file containing the domain application server password. --terse indicates that any output data must be very concise, typically avoiding human-friendly sentences and favoring well- formatted data for consumption by a script. Default is false. --echo setting to true will echo the command line statement on the standard output. Default is false. --interactive if set to true (default), only the required password options are prompted. --poolname connector connection pool name for which the security map that is to be deleted belongs to. OPERANDS
mapname name of the security map to be deleted. Example 1: Using delete-connector-security-map asadmin> delete-connector-security-map --user admin --password adminadmin --poolname connector-pool1 securityMap1 Command delete-connector-security-map executed successfully EXIT STATUS
0 command executed successfully 1 error in executing the command asadmin- create-connector-security-map(1AS), asadmin-list-connector-security-maps(1AS), asadmin-update-connector-security-map(1AS) J2EE 1.4 SDK March 2004 asadmin-delete-connector-security-map(1)