Sponsored Content
Full Discussion: Can we secure telnet on AIX
Operating Systems AIX Can we secure telnet on AIX Post 302963837 by bakunin on Thursday 7th of January 2016 05:13:09 AM
Old 01-07-2016
Quote:
Originally Posted by system.engineer
is there a way to secure telnet without disabling it ? i found some information online related to other OS, but not for AIX.
Unfortunately there is no way to do that and i would rather doubt that other systems could do it either.

"telnet" (and the same goes for "ftp") is not only a client program, but a protocol too. This protocol runs on top of an unencrypted TCP connection. When you use telnet to connect to another machine then first a so-called "virtual channel" (a layer-4-socket connection) is created to connect the two machines. Over this connection the telnet protocol data are pumped to and fro.

TCP is connection-oriented, but because TCP itself relies on IP (that is: TCP packets are transported using IP packets), which is connectionless, one can put his own network card in promiscuous mode (which simply means to read all oncoming packets, regardless of them being addressed to the own system or not) and copy the content of - ultimately - the telnet connection. *) And because the telnet protocol uses unencrypted passwords a possible attacker can isolate the password information from the protocols stream and use it himself. Therefore it doesn't matter what you send yourself over the telnet/ftp connection, once you do that the used account is - in principle - compromised.

ssh/sftp/scp and similar tools avoid this problem because they not only use an encrypted channel but they also encrypt the sent password information used to encrypt the data. This means: you can use the same techniques to completely copy the streams of data going back and forth, but it would only be gibberish as long as you do not possess the encrypting keys.

How secure-protocols work (in principle)
The key in this technique is to use different keys on both sides of the connection and add them. Let us call the partners "hostA" and "hostB" and their keys accordingly. Then the process is like that:

1) HostA uses its own key, encrypts its packet : keyA("keyA")->hostB
2) HostB takes it, encrypts it with its own key and sends it back: keyB(keyA("keyA"))->hostA

Now, because hostA knows its own key and the encryption is designed so that its commutative (keyB(keyA(something)) = keyA(keyB(something))) hostA can "subtract" its own key and so get the key of hostB. Likewise on the other side. This way they exchange keys without a key ever being sent unencrypted.

I hope this helps.

bakunin

__________
*) Normally a network card would read all the addressing information in every packet. If a packet is addressed to it, it reads the rest of the packet, otherwise the packet is ignored. "Promiscuous mode" means to read all the packets, regardless of the address information. This is how network sniffer programs work and its not necessarily malicious. Network technicians use that all the time to diagnose connection problems.
This User Gave Thanks to bakunin For This Post:
 

10 More Discussions You Might Find Interesting

1. AIX

telnet problem in aix

Can somebody help me. Whenever I telnet to my server i received a message /dev/pts/0: 3004-004 You must "exec" login from the lowest login shell. Connection closed. pls help me (2 Replies)
Discussion started by: vjm
2 Replies

2. AIX

aix telnet disconnects

We're having problems getting disconnected from AIX with our telnet sessions. I can't ping the server when this happens, either. Other serves can be pinged at the same time. This happens both at unix and within the database. Database locks remain when editing files. unix logins remain after... (0 Replies)
Discussion started by: e1lyons
0 Replies

3. AIX

How to use SSH Secure File Transfer tool from windows to AIX without password?

If I use SSh Secure File Transfer tool on Windows, I want to transfer file from windows to AIX without password, how to do it? (6 Replies)
Discussion started by: rainbow_bean
6 Replies

4. UNIX for Advanced & Expert Users

difference between logging into unix through f-secure ssh client and telnet

hi, what is the difference between logging into unix through f-secure ssh client and telnet is there any more security check is involved can any one explain thanks in advance (1 Reply)
Discussion started by: trichyselva
1 Replies

5. AIX

How to secure ftp in AIX

Hi, the default ftp that comes with AIX5L is not secured as far as i know. How to install and use the secured FTP in AIX? Linux these days uses vsftpd daemon(very secured FTP daemon) is there VSFTPD for AIX? if there is any where can i download it from? thanks and regards Pchangba (1 Reply)
Discussion started by: pchangba
1 Replies

6. AIX

AIX 4 and telnet

I have a very old IBM server running AIX 4 and it runs our old inventory management software. The system was working fine until we had a recent power outage. When the machine came back on, everything seems to work fine, except telnet. The machine pings fine, but telnet says connection is... (10 Replies)
Discussion started by: shudson105
10 Replies

7. AIX

AIX and Secure Shell

I just installed 5.3 TL0 on a B50 server. I need to get ssh installed. I tried the links at http://sourceforge.net/projects/openssh-aix] I downloaded openssh_5.2p1_aix53.tar and openssh-4.5_srcpatch.tar. The installation failed. The notes say that this was compiled for TL 8, and mine is... (3 Replies)
Discussion started by: Geekasaurus
3 Replies

8. AIX

Setting up a secure channel with AIX

hi i have two aix servers and I was asked to setup a secure shell between the two servers using the sybase user. Can any one let me know how to do this (2 Replies)
Discussion started by: newtoaixos
2 Replies

9. AIX

Telnet for AIX 5.3

Hi all, I have 2 servers (Oracle & Weblogic) in 1 AIX box (Different partition). I recently had done a security hardening to this AIX box. And it disable the FTP and TELNET functions of both servers. I manage to recover the settings for the Oracle server but i have totally no access to the... (2 Replies)
Discussion started by: shinnee
2 Replies

10. AIX

I am a NEW Dummy here(AIX telnet)

I work for a health care company part of my job is to run checks we use a telnet session that we use AIX 6 commands. I have almost no programming experience but i want to learn it, we have a programmer here but he has no time my question is,, Is there anything that allows you to program a GUI... (7 Replies)
Discussion started by: jtechie3
7 Replies
All times are GMT -4. The time now is 01:41 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy