disable telnet enable rsh with PAM
2007-12-25 1:04:00
I have 10 Solaris 8 machines in a protected network. I would like to disable telnet access as root, but in the same time I want to allow root to rsh from one machine to another.
At first I thought that it's fairly simple, and all I have to do is edit /etc/pam.conf, but try as I might, I still get:
# rsh iw
Not on system console
Connection closed.
Now I know that I get this because I have the line
CONSOLE=/dev/console
in my /etc/default/login, but that should only matter for login, not for rsh, shouldn't it?
I have this in /etc/pam.conf:
rsh auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
rsh account optional /usr/lib/security/$ISA/pam_unix.so.1
rsh session optional /usr/lib/security/$ISA/pam_unix.so.1
What's wrong?
Ors
Comments
Got something to say?
You must be logged in to post a comment.
