Solaris

On Solaris 8 is there anyway to disable telnet for a particular user and not for entire system altogether?

I would like the user to retain a shell and so creating a noshell like ftp account is not an option.

Make the default shell be /usr/bin/false. The /etc/passwd entry would look something like

Code:

user2:x:1234:4321:no telnet:/home/user2:/usr/bin/false

Also you can add the users entry in /etc/hosts.deny file to block the user.

Like I said, the user needs to retain a shell. Setting it to "false" doesnt serve my purpose.

I am curious what hosts.deny is, can you send me code for that file to disable a user?

Check this: Sun: Solaris - hosts.deny and hosts.allow and/or man hosts.deny

I will investigate hosts.deny but it looks like it controls settings for hosts/IPs connecting to the server and not user accounts already on the system.

Aaa yeah, you're right mate, sorry, I've missed that...

---------- Post updated at 15:25 ---------- Previous update was at 15:00 ----------

This is one way you could do it, though I'm sure it's not the best:
Run script which will monitor established connections from specific user;
if a telnet connection from that user is found, kill that process id.

On FreeBSD I can find the appropriate pid using following command:

Code:

$ sockstat | grep ^user-to-find | grep telnet
user-to-find  telnet     2107  3  tcp4   sourceip:sport    targetip:23
$ kill 2107

Code:

     sockstat -- list open sockets

Now you just need to find a proper sockstat alternative command for Solaris.

try in hosts.deny

Code:

in.telnetd : forbiddenuser@hostIP