AIX

Hi all,

I have 2 servers (Oracle & Weblogic) in 1 AIX box (Different partition). I recently had done a security hardening to this AIX box. And it disable the FTP and TELNET functions of both servers. I manage to recover the settings for the Oracle server but i have totally no access to the Weblogic server now. Is there anyway for me to configure the Weblogic server's inetd.conf file from the Oracle server side? I did manage to see the Weblogic server from the Oracle server CDE Network settings but I can't seems to add the TELNET/FTP subsystem to the inetd module. Wish there are people who can help me on this and thanks in advance.

Regards,

Shin

You can try rlogin if it's not disabled.

Also as you have said you can you can exploit CDE remote login from either a PC using application such Xmanager or from the other server

You can install OpenSSH server.
1) Obtain the files. It’s downloadable here:OpenSSH on AIX | Download OpenSSH on AIX software for free at SourceForge.net. Or you can find it on the expansion CD. Or the Linux toolkit for AIX CD.

2) Install. If you’re using a CD,
1) Insert CD, “AIX Expansion Pack”

2) Run SMIT

Code:

AIX# smit

4) Navigate to Install Software

Software Installation and Maintenance > Install and Update Software > Install Software

5) Specify your device as your CD (i.e. /dev/cd0)

6) Scroll to SOFTWARE to install. Press F4 or esc+4.

7) Find openssh.base and openssh.man.en_US. Select these using F7 or esc+7

8) Hit enter a few times and it should be installed on your system .

9) Test the command as root:

3) Start your SSH.

Code:

AIX# startsrc -g ssh

4) Edit your /etc/hosts.allow file. Otherwise you’ll see an error that says this:

ssh_exchange_identification: Connection closed by remote host

5) Test it out.

Code:

somesrvr# ssh AIX

How to enable Telnet

1) Uncomment out telnet from

Code:

 /etc/inetd.conf

.

2) Reload the configuration file

Code:

AIX# refresh -s inetd

3) Test. You should get a nice error message like this:

Code:

somsrvr# telnet AIX

there are other things you can do is to stand before your console and access your system via console

Hi h@foorsa.biz,

thanks for your advice. May I know what are the possible ways for me to access the Weblogic svr files so I can edit to enable the FTP and telnet. As for now, I can access my Oracle svr phyiscally and remotely. But for my Weblogic svr, I can't change the my display to Weblogic svr as the display is only for the Oracle svr. So I can say before all this issue happened, I accessed the Weblogic svr thru remote from my Windows Server using Putty. And also, SSH on the servers are not installed/configured. So I need to know are there any other possible ways to access that Weblogic svr. Currently what I know the Security Hardening script disable ftp, telnet, rlogin, shell, uucp. Thanks in advance.