10-12-2008
If you give a user a shell of /bin/false, this pretty much disables them from telneting. They can connect, but are instantly logged out. But if you put /bin/false into the file /etc/shells, they will still be able to use ftp. This is how I set up an ftp-only user. I then keep /bin/true out of /etc/shells, and I can set the shell to /bin/true to disable ftp as well.
Warning: if you are missing /etc/shells, the system behaves as if it exists and contains over a dozen entries. These are listed on the shells man page. Do not simply create a /etc/shells file with one line in it. You need to put in the default enties as well.
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Does anyone know a way to log into a telnet server with username and password all with one command? I have to do this remotely. I can do this with FTP with the following command under windows:
ftp -s:c:\dir\test2.txt 10.0.0.207
The "-s:filename" option is just a list of commands that occurs... (2 Replies)
Discussion started by: ober5861
2 Replies
2. UNIX for Dummies Questions & Answers
ok here is a little bit on what I am trying to do. I am logged into a saolaris 9 server and telnet to another server to run an application that sits on the second unix / linux server. This application can sit idle for an hour to two and any given time. During this time the telnet session timesout... (4 Replies)
Discussion started by: Acleoma
4 Replies
3. Solaris
Hello All,
I have a question. I have two V480 systems that can telnet to other systems on our network, but lo cannot receive a telnet from other systems.
I've check the usual .rhosts, env and several other files such as the telnetrc
files with no luck.
I've tried all avenues before issuing... (8 Replies)
Discussion started by: mr-synapse
8 Replies
4. HP-UX
When using telnet connect to HP unix 10, it will get a pty/ttyxx terminal,
but using telnet connect to HP unix 11, it will get a pts/tx terminal.
I want to ask is, can I using telnet connect to HP unix 11 and get a pty/ttyxx terminal ?? :confused:
thx a lot (3 Replies)
Discussion started by: zetadhell
3 Replies
5. UNIX for Dummies Questions & Answers
How do I get back to Unix prompt while telneting to a router w/out exit from the telnet session? Thanks (2 Replies)
Discussion started by: oppiz
2 Replies
6. Shell Programming and Scripting
Somewhat long story:
I have a simple Perl CGI script that uses Expect to Telnet to a device and grab some data, and then spits it back to Perl for display on the Webpage.
This works for many devices I've tried, but one device just fails, it keeps rejecting the password on this device, only... (1 Reply)
Discussion started by: jondo
1 Replies
7. Shell Programming and Scripting
Hi all,
I have written a small expect script which should spawn a telnet session login and execute some commands.
#!/usr/bin/expect -f
spawn telnet $env(IP)
match_max 100000
expect "login:"
send -- "******\n"
expect -exact "Password:"
send -- "****\n"
expect "%"
Now I have got... (2 Replies)
Discussion started by: stinkefisch
2 Replies
8. IP Networking
Hello!
I'm writing a small telnet client using Erlang and the gen_tcp library.
I receive IAC WILL ECHO and IAC WILL SUPPRESS_GO_AHEAD
which I respond to.
Then I receive various text output from the server, and then this:
resize: unknown character, exiting.
I'm curious as to why I do... (1 Reply)
Discussion started by: Gustav
1 Replies
9. UNIX for Dummies Questions & Answers
Hi,
I was writing one script which includes to switch to the another telnet automatically from the present telnet server. I was using rlogin but firstly it takes the same user name of the present telnet and secondly it is prompting for the password.
But i want to switch to the another telnet... (2 Replies)
Discussion started by: Prateek
2 Replies
10. UNIX for Dummies Questions & Answers
Hi,
I want to know the difference between these two services. Both are under xinetd. Both are used for enabling and disabling Telnet service. So, can somebody please explain me the difference between the two ?
Thanks in advance :) (0 Replies)
Discussion started by: kashifsd17
0 Replies
LEARN ABOUT SUNOS
ftpusers
ftpusers(4) ftpusers(4)
NAME
ftpusers - file listing users to be disallowed ftp login privileges
SYNOPSIS
/etc/ftpd/ftpusers
The ftpusers file lists users for whom ftp login privileges are disallowed. Each ftpuser entry is a single line of the form:
name
where name is the user's login name.
The FTP Server, in.ftpd(1M), reads the ftpusers file. If the login name of the user matches one of the entries listed, it rejects the login
attempt.
The ftpusers file has the following default configuration entries:
root
daemon
bin
sys
adm
lp
uccp
nuucp
smmsp
listen
nobody
noaccess
nobody4
These entries match the default instantiated entries from passwd(4). The list of default entries typically contains the superuser root and
other administrative and system application identities.
The root entry is included in the ftpusers file as a security measure since the default policy is to disallow remote logins for this iden-
tity. This policy is also set in the default value of the CONSOLE entry in the /etc/default/login file. See login(1). If you allow root
login privileges by deleting the root entry in ftpusers, you should also modify the security policy in /etc/default/login to reflect the
site security policy for remote login access by root.
Other default entries are administrative identities that are typically assumed by system applications but never used for local or remote
login, for example sys and nobody. Since these entries do not have a valid password field instantiated in shadow(4), no login can be per-
formed.
If a site adds similar administrative or system application identities in passwd(4) and shadow(4), for example, majordomo, the site should
consider including them in the ftpusers file for a consistent security policy.
Lines that begin with # are treated as comment lines and are ignored.
/etc/ftpd/ftpusers A file that lists users for whom ftp login privileges are disallowed.
/etc/ftpusers See /etc/ftpd/ftpusers. This file is deprecated, although its use is still supported.
/etc/default/login
/etc/passwd password file
/etc/shadow shadow password file
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+-----------------------------+-----------------------------+
|Availability |SUNWftpr |
+-----------------------------+-----------------------------+
|Interface Stability |External |
| | |
| /etc/ftpd/ftpusers | |
+-----------------------------+-----------------------------+
|Interface Stability |Obsolete |
| | |
| /etc/ftpusers | |
+-----------------------------+-----------------------------+
login(1), in.ftpd(1M), ftpaccess(4), ftphosts(4), passwd(4), shadow(4), attributes(5), environ(5)
1 May 2003 ftpusers(4)