using redhat 7.2
Is it possible to not allow root to ssh into the server remotely, but allow the account that ssh'd in to the box to su to root? This way there is the added security of a hacker needing two passwords to hack your computer, a username/password for a regular account and also the... (3 Replies)
OK, let see, i have a Tru64 Unix and need to know how the list of ftp users works and in /etc/ftpusers we have the unauthorized users but when we create a new user i want this users put automatic for deny access .....
where i set when creation of users action put automatic the user in that file?... (1 Reply)
Hi,
I have to forbid root-logins on all my servers, expect from two machines, these 2 machines login with root without a password
it was quite easy with ssh, but I have a problem regarding rsh/rlogin, an there
are a lot of rsh jobs, so it would take a lot of time to change all this... (4 Replies)
hi,all, i have a question to trouble you.
a workstation named AAA, and open the ftp services to permit user download and upload files. i have root password.
a pc install windows 2k named BBB, someone install a serv-u ftp ( a ftp server software ) to transfer data. i don't have the... (4 Replies)
Hi ,
I want to deny ftp access to some user. Currently I don't have /etc/ftpusers file. From the man page , i can modify the login shell at /etc/passwd to invalid one. How to add it ? replaced with /dev/null or something. If you have any other method to disabled it . Pls show me.
My FTP is... (10 Replies)
Somewhat long story:
I have a simple Perl CGI script that uses Expect to Telnet to a device and grab some data, and then spits it back to Perl for display on the Webpage.
This works for many devices I've tried, but one device just fails, it keeps rejecting the password on this device, only... (1 Reply)
Hello everyone
I have to limit the root logins on my aix box (aix 5.3)
I change the value on the /etc/security/user
default (login and rlogin) change to false
and add to root (rlogin and login = false)
I tried in different ways but I got the same.
Root still can login
I try algo... (6 Replies)
Hello I want to block individuals who attempt to use ssh to loggon to one of my machines from a certain IP address. I added the following entry in hosts.deny. Will the entry do what I want to do?
ssh: 202.111.128.225 (3 Replies)
Is there a way to deny access to a specific remote login option.
example:
usera--deny telnet access but keep rsh and rlogin
userb--keeps telnet, rsh, and rlogin
I'm basically trying to contol the access per services instead of changing the LOGIN REMOTELY(rsh,tn,rlogin) option to yes or no. (12 Replies)
Hi there,
For /etc/hosts.deny was it used to deny access from the internet? (2 Replies)
Discussion started by: alvinoo
2 Replies
LEARN ABOUT HPUX
nstrtel
nstrtel(5) File Formats Manual nstrtel(5)NAME
nstrtel - specifies the number of telnet device files the kernel can support for incoming telnet sessions
VALUES
Failsafe
Default
Allowed values
(Subject to available physical memory.)
It is best to use the default value, and there should not be any need to lower it. However, if the simultaneous telnet connection load is
very high, then the value of could be increased.
Recommended values
(Default value.)
DESCRIPTION
The telnet daemon uses two STREAMS-based pseudo-terminal drivers and The kernel parameter, can be used to tune the number of pseudo-termi-
nals. specifies the number of kernel data structures that are created at system boot time that are required to support the device files
used by incoming telnet sessions on a server. If the command or SAM is used to create more telnet device files, the value of must be
increased accordingly or the device files cannot be used because there are no kernel data structures available for communicating with the
system.
Who Is Expected to Change This Tunable?
Anyone.
Restrictions on Changing
Changes to this tunable take effect at the next reboot.
When Should the Value of This Tunable Be Raised?
When there is an increase in the load of telnet connections and there are no device files available to open telnet connections, then this
kernel parameter should be increased.
When the error is encountered, then the device files have been exhausted and should be raised. Once the value of is raised, should be run
to create new device files. (If SAM is used to raise the value of is run automatically.)
What Are the Side Effects of Raising the Value of This Tunable?
More resources would be consumed. Extra kernel data structures, and extra device files may clog the system.
When Should the Value of This Tunable Be Lowered?
It is not advisable to lower the tunable value from the default value. Consult HP Support before lowering this tunable from the default
value.
What Are the Side Effects of Lowering the Value of This Tunable?
Though not recommended, there would not be any side effects.
What Other Tunables Should Be Changed at the Same Time?
None.
WARNINGS
All HP-UX kernel tunable parameters are release specific. This parameter may be removed or have its meaning changed in future releases of
HP-UX.
Installation of optional kernel software, from HP or other vendors, may cause changes to tunable parameter values. After installation,
some tunable parameters may no longer be at the default or recommended values. For information about the effects of installation on tun-
able values, consult the documentation for the kernel software being installed. For information about optional kernel software that was
factory installed on your system, see at
AUTHOR
was developed by HP.
SEE ALSO insf(1M), telnetd(1M), telm(7), tels(7).
Tunable Kernel Parameters nstrtel(5)