Security
We use RAS with AAA in our company.
1. Is it true RAS/AAA can ONLY control the user to the first server?
2. Is there any products that can control the user from telneting from an first/authorizied server to an unauthorized server not on the AAA access list?
Thank you.
by tsejmk
by tsejmk
by philanderson
You can either manually run
Tlntadmn.exe or double-click on the Telnet Server Administration icon
in the Administrative Tools folder. This utility can be used to start
and stop the Telnet service, list current users, terminate user
sessions,and configure the server options.
I would suggest telneting to the servers you do not want others accessing and stopping the service aswell as turn off port23 and 389. beware though 389 is the LDAP ananonn users connection so you may not want to gothat far with it. in addition you may want to upgrade your servers to win2k so you can take advantage of the NTLM features intergrated into telnet although with win2k Telnet you loose the GUI, I copied the telnet.exe file from a NT40 server disk to the win32 folder on the win2k machines that i use to regain the GUI plus have the NTLM authentication method instead of plain text.
To disable Internet services on
your LINUX machine open /etc/inetd.conf and place an asterisk in front of the
line specifying the service you want to disable. Remember to reapply this after update and or reinstall a version of LINUX aswell. Hope this helps...
by tsejmk
I am looking for ways which can selectively allow different users to telnet/rcp/ftp, etc to machines which are not on my AAA control list.
Thank you any way!
This discussion is closed to new replies.
Sort by Trending