Solaris 9 denies a telnet login

Hi, Can you tell me where Solaris 9 is configured to deny a telnet login. I need to turn this feature off.
Thanks

Yes, I did forget to comment out the "CONSOLE" field in my /etc/default/login file. Everything seems to be ok. Thanks for your time.

Similar Messages

Solaris 10 / Sparc: Last Unsuccessful Login

Hi guys,
I would like to know if there is a way to configure my "Solaris 10 / Sparc" system in order that, after a user login on the system, the console displays a message containing the Last Successful Login date and the number of failed login the same user attempts since last login successfully carried out . I hope I've been clear even if the requirement is a bit contorted.
It would be enough for me just know who is the program that produce the message "Last Login: ..." (eg, "Last Login: Mon Jul 6 10:03:59 from 10.173.123.34") in order that I can try to do the same thing with the number of unsuccessful login.
The message "Last Login: ..." is already printed on my Sistem. So I don't need to configure this: I only need to know how to print the number of failed login the same user attempts since last login successfully carried out.
I did some research online and almost all advise to put in "/etc /profile" the following lines:
echo "Login Successful LAST: $ (last-R $ LOGNAME | head -1)"
echo "Login Unsuccessful LAST: $ (lastb-R $ LOGNAME | head -1)"
The problem is that on my machine I can not find the command lastb. I can find Only the "last" command.
Thank you

lastb is a Linux program, also available on HP-UX but not Solaris.
For Solaris you use the loginlog file - create a file in /var/adm - touch /var/adm/loginlog. Make it read and write only for the owner, which is root, and in group sys. Any failed logins at the command line login will show up in /var/adm/loginlog. Failures at the GUI login will not, these show up in /var/adm/messages. The only place I can see to get the last login information at the GUI would be from the /.dt/startlog.old in the user's home directory or /var/adm/messages.

Solaris 10 logfile for bad logins

Hi,
I wanted to know where the failed logins are logged in Solaris 10. On Solaris 8 it is /var/adm/loginlog.
On solaris 10 however I find that this file is non existent.
Please help
Rgds

Hello,
first look your /etc/default/login file. make sure
SYSLOG=YES
SYSLOG_FAILED_LOGINS=1
lines uncommented and proper values
look your /etc/syslod.conf file.
if there is auth.notice or auth.info line then last field in that line shows your file.
if there is no line such you add
auth.info<press tab>/var/adm/auth
or similar line and refresh syslogd
svcadm refresh system/system-log
it should now log login attempts.
Osman

Solaris never booted to gui login screen

I have made a new installation of solaris 10 on HP xw8600 workstation. After selecting from grub the top most choice which normally yields a gui login screen, the pc is restarted.
Some say it is due to mainboard thermal issues where solaris shuts down/restarts for safety (physically I don't think there is any thermal problem).
Is/are there any switch or parameters for some safe mode (not the command line, but the gui).
Or what may be the problem?
Thanks,

Ok, I have managed to solve my problem myself:
first go through this thread:
http://forum.java.sun.com/thread.jspa?threadID=5224214
then I applied these patches and off it goes now I have a 64 bit running Solaris10
First: Patch no: 125370-06, fault manager
Second: Patch no: 127112-08, kernel patch
(I dont know where the links are I followed the update manager in solaris)
good luck,

Telnet login validation.

HI,
I have a Java GUI app that telnets to a unix box and executes some commands. Everything works fine if the login/password is correct, but I don't really have a solution to check for login failure messages. The program need to determine whether the login was successfull or not. One way that I tought of was to look for the return string from the server and if it say "Login invalid", or "Account locked by .." or simillar messages, then the login failed. But this solution is not really what I'd like to use, because first I don't know what are all the login error messages that the server throws, and also whether these messages are universal.
Any help is appreciated.
Thanks.

I am using telnet source from javatelnet.org (javassh.org). I doesn't really give me a solution to my problem. The code assumes that the user can see the return string from the telnet app and determine what to do next. Here is the code:
public void connect() throws NetworkException
try
     LogPane.writeMedic("Connecting to " + serverName + " for " + username);
     rpcSession.connect(serverName, port);
     rpcSession.login(username, password);
rpcSession.setPrompt(PROMPT);
     rpcSession.send("export PS1='" + PROMPT + "'"));
     rpcSession.waitfor(PROMPT);
catch (IOException e)
     //          LogPane.writeError("Error! Connecting to " + serverName);
               throw new NetworkException("Error! Connecting to " + serverName);
     //     e.printStackTrace();
login code from rpcSession:
public synchronized void login(String username, String password) throws IOException
byte[] b = new byte[256];
int n = 0;
waitfor("login:");
     send(username);
     waitfor("Password:");
     send(password);
The program waits for "login" and "password" and send their values and then it waits for the prompt, it only works if the login is successfull.

Login issue with solaris 10

I m facing a problem with login to solaris 10
at time of login its showing ttymon: tmchild: exec service failed
i m not able to access this machine because of this.
Any one has any solution to this problem?

Originally Posted by jerryrpiper
I have several HP/Compaq computers that are P4 2.4 Ghz with 512 meg of ram on the computers. The issue has to do with login. If I have a user that rebooted the computer and another user will login after that user the computer ask for the local workstation user name and password. I have tried this on my Dell computers and Brand new HP computer's and have no problems with them. Has any one come across this type of problem. This only happens on the S-510 and 530 models.
One thought...: Possibly a old Novell client installed on those models... I remember having an issue with users having to open the advanced login options, goto the windows login box. There the previous logged in user name needed to be cleared and login would be transparent again.

Need simple class for communicating with Solaris account

Hey, gang. After over a week of searching this forum and the Web for a solution, I'm stuck. I hope someone here can help.
I've got a Java application intended to run on both Windows and Solaris systems that needs to perform the following automated operations:
1. Connect to a user account on a Solaris server.
2. Login.
3. Run an sccs command.
4. Retrieve the output from the sccs command.
I can run commands (such as sccs) directly from Java; I've worked out how to do that. My situation is that I need to run sccs from an authorized account so that all file checkin/checkout operations are tagged properly. So the requirement to connect to a server isn't one I can ignore. I also don't need a full-up interactive client interface -- this needs to be an automated process.
What I'm hoping is that someone here will be willing to provide (or point me to) some relatively simple source code I can call to do this stuff. Maybe an example of a class that uses Socket and a couple of streams to programmatically connect to a server, send commands, and capture input. That's really all I need.
I've tried calling the Jakarta Commons telnet class to connect to the Solaris server, but it's more overhead than I need. (Plus the input stream kept blocking when I tried to use it in a purely automated mode.) I've also tried rolling my own code using the minimal info available on Google, but have not been able to figure out the magic words necessary to get anything back but gibberish. (InputStream and BufferedReader just do not seem to want to cooperate. Either I get back only garbage text, or readLine() or read() gets nothing and just sits and waits until the timeout.)
So I turn to the experts here. If anyone can offer (or direct me to) any simple, non-libraried source code that enables my Java code to connect to and talk to a Solaris machine, I'd be grateful.
Thanks!

I was hoping a separate server-side process wouldn't be needed -- if you're thinking of something like RMI, that's also a bit heavyweight for my needs. I know I can talk to the remote server on telnet port 23, though.
Further experimentation today with the Jakarta net library has generated something that works using their telnet classes. (After I asked for help here, of course. The same thing happens when I shop for groceries....) But using this leaves me referencing an external library that:
1. has functionality I don't need that complicates the code, and
2. forces me to address licensing requirements.
So I'd still love to see an example of a telnet-like Java class that strips away all the non-essentials in the Jakarta telnet library code, leaving behind a simple public domain class that can be used to connect to a remote host and transfer characters over that connection.
I appreciate that this may be asking for a lot, but as they say, if you don't ask, you don't get. ;-)
Thanks!

Account names can break LDAP logins?

I've successfully installed and patched (patches 118833-36, 119963-08 and 122032-05) my Solaris 10 system so it's using LDAP against the Sun Java System Directory Server Enterprise Edition 6.2.
On my test box, I have several test accounts setup.
On the one that is simply my last name, everything works fine. SSH logins, telnet logins, and password changes. SO I'm sure the pam.conf and nsswitch.conf works right.
On several other accounts, they work just as well.
However two accounts do not. getent -v | grep username shows the accounts. I can "su - account" from root and get in fine. However if I try to SSH or telnet in it rejects my password. The password being entered IS correct.
The one thing they have in common is that they are both contractor accounts, which due to corporate standards are
8 numeric digits starting with an 8, so something like 81234567 would be a contractor ID.
Renaming the bad contractor accounts in the LDAP editor (but NOT changing the password) allows me to SSH in.
Renaming the test account with my last name to a contractor style name breaks it.
I read "man -s 4 passwd" and couldn't find where our naming standard violates the Solaris system standard.
Thoughts?

From the Solaris 10 Basic System Admin Guide at: http://docs.sun.com/app/docs/doc/817-1985/6mhm8o5l8?a=view#userconcept-30
"User names � They should contain from two to eight letters and numerals. The first character should be a letter. At least one character should be a lowercase letter."
Sun probably should have used the word "must" instead of "should." ie. First letter must be a letter.
The system behavior you are describing seems to bear this out.

Logging off multiple login sessions of the same user

Hi,
When I login to solaris through a telnet session and type "who", I see that many of my previous terminal login sessions from the same ip address are still open.
Although only one telnet login session is established curretly, I see multiple previous logins.
How can I kill all the previous login sessions I made from the same IP address as the current one?
Thanks,
Rommel Sharma.

Try this:
kill -1 `ps -fu username | awk '{ print $2 }'`
This will kill all the user sessions, including the one you ran it from. It's a bit extreme, but simple. :-)
HTH,
Roger S.

Visio 2010 Link a Stencil to Telnet

Good morning everyone,
I have been searching Google for two days now on how to link a Visio 2010 Stencil to Telnet so that when you hold control and click the stencil it brings you to the telnet login prompt for that router or switch.
I went to insert hyperlink, then chose local file, and linked to telnet.exe for starters. When I ctrl+click on a stencil I get a security warning asking if I want to continue; I clicked yes, but nothing happened. For kicks, I even tried clicking No and
still nothing happens.
I then tried creating a shortcut to telnet and pointing the hyperlink to that local file with no luck.
Lastly I wrote a .bat file and tried to get the .bat file to launch telnet to my router/switch, and that works if I directly open the .bat file but does not link from Visio.
Does anyone know how I can simply make Visio 2010 so that I can click on the stencil and it auto opens telnet prompt allowing me to login to that device?
Thank you

The technique the example uses requires modifications to the shape (thus making them unique on the page) and the code then calls an executable that accepts command line options and enters the appropriated operands to the call (ip address, port, etc.).
This is the 'easy' way to accomplish calling the telnet session. Be aware that as of Win7 calling command line executables via a browser was modified to make it more difficult.
al edlund
Al Edlund Visio MVP

Solaris 11 (Oracle VM VirtualBox)

I installed the Oracle VM and Solaris 11 to my Windows 7 machine. Works excelent. Now my boss wants me to install it in the Lab Systems which have several users.
The VM shows in the users Desktop, but the system (solaris11) does not.
How can I configure the VM, so i can show the System (solaris11) in all users desktop?..
Do i have to install solaris 11 in every user login?... ? users login throught the domain.
Edited by: user1502 on May 16, 2012 11:17 AM

This seems to be ok - make sure you accept the license before downloading.

LMS 3.2 and RME 4.3.1 telnet with tacacs+ fails

Hi everyone,
I'm having issue with credentials verification for telnet with TACACS+ enabled. Verification job fails with "Telnet: Incorrect" and an exception to daemons.log:
om.cisco.nm.lib.cmdsvc.CmdSvcException: com.cisco.nm.lib.cmdsvc.telnet.TelnetException: Unable to read from socket
        at com.cisco.nm.lib.cmdsvc.TelnetSession.connect(TelnetSession.java:89)
        at com.cisco.nm.lib.cmdsvc.Session.connect(Session.java:152)
        at com.cisco.nm.lib.cmdsvc.AuthHandler.connect(AuthHandler.java:254)
        at com.cisco.nm.lib.cmdsvc.OpConnect.invoke(OpConnect.java:56)
        at com.cisco.nm.lib.cmdsvc.SessionContext.invoke(SessionContext.java:299)
        at com.cisco.nm.lib.cmdsvc.Engine.process(Engine.java:57)
        at com.cisco.nm.lib.cmdsvc.LocalProxy.process(LocalProxy.java:22)
        at com.cisco.nm.lib.cmdsvc.CmdSvc.connect(CmdSvc.java:190)
        at com.cisco.nm.lib.cmdsvc.CmdSvc.connect(CmdSvc.java:166)
        at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.CliOperator.<init>(CliOperator.java:214)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.IOSCliOperator.<init>(IOSCliOperator.java:116)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.CatIOSSwitchCliOperator.<init>(CatIOSSwitchCliOperator.java:56)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.Cat6kIOSCliOperator.<init>(Cat6kIOSCliOperator.java:32)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.Cat6kIOSConfigOperator.getOperator(Cat6kIOSConfigOperator.java:35)
        at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.OperatorCacheManager.getOperatorForDevice(OperatorCacheManager.java:50)
        at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.ConfigOperation.doConfigOperation(ConfigOperation.java:99)
        at com.cisco.nm.xms.xdi.pkgs.SharedDcmaIOS.transport.IOSConfigOperator.fetchConfig(IOSConfigOperator.java:73)
        at com.cisco.nm.rmeng.dcma.configmanager.ConfigManager.updateArchiveForDevice(ConfigManager.java:658)
        at com.cisco.nm.rmeng.dcma.configmanager.ConfigManager.performCollection(ConfigManager.java:1646)
        at com.cisco.nm.rmeng.dcma.configmanager.CfgUpdateThread.run(CfgUpdateThread.java:27)
I've tried to edit TacacsPrompts.ini also with suggestion to enter "," after last space character
I'm using only TACACS so all prompts are the same. I'm using MOTD also.
TACACS prompt looks like this example : "TEST username: ,TEST password: " so this looks obvious.
The issue started to appear after some patching done to RME and CiscoView, but I'm not sure that this is connected anyhow.
Thanks for all the help

Hi!
They gave me the solution like this:
line vty
timeout login response 90
Ofcourse it helped but this it still inproper behavior from LMS side. It sends the username char by char for more than a minute! Guess the scenario with thousands of devices.... It will take ages to telnet to them. And network performance has nothing to do with that - i'm running the LMS on a powerful Sun and the network is mostly gigabit connected.
Setting timeout login response is a workaround but does not fix the problem.
Still waiting fot some fix to LMS not for fairly acceptable workarounds.
This is NOT case with TACACS enabled on a router. The box responds within moment when telneted using commandline or other NMS software. This is a problem with LMS telnet login mechanism and prompt parsing (TacacsPrompts.ini doesn't seem to work at all, I could type there anything and it has no effect on the login proces).
Besides this SSH to the same box wit TACACS works flawlessly. But then it parses only password prompt not the username - this is sent by ssh.

How to get Solaris 10 to boot from the CLI instead of the GUI?

I tried searching on the site but was unable to get useful information from setting up Solaris such that it boots to command prompt instead of the GUI. Any help or suggestions would be appreciated.

This will also work if you're running out-of-the box Solaris 10:
svcadm disable graphical-login/cde-login:defaultThe problem with doing it that way is you then can't use your Solaris host to run SunRay thin clients. If you need to use the box as a SunRay server, you'll have to remove the reference to the :0 display somewhere in /etc/dt/config/Xconfig, IIRC.

Install Process for solaris 10 6/06

After installation, Solaris prompts me for a login and pass
What is the default admin pass??

I've seen this before. Sometimes the installation doesn't prompt for a root password, and you can't login as root. Just power-off the system and start in failsafe mode. Then mount the root partition(it asks you if you'd like to do that) and edit /[mountpoint]/etc/shadow and remove the encrypted passwd string:
root:R1yP.BOK1xTeU:6445::::::
becomes
root:::::::
Then reboot, choose command-line login and log in as root.
/A

Solaris 10 boot oddity

I'm pretty new to Solaris, but I have a pretty solid background in unixy/linuxy type OSes. I've been getting into Java lately so I figured I might as well install Solaris just cuz'. So I have my root account, and my "poweruser" account that's simply a non-root admin type account. The thing is, when it boots up Solaris insists on setting the login screen to the world's biggest possible resolution, which in VMware is more of an irritation than anything else because both accounts of the system run in 1280x800. How on earth do I get the login screen to load up into 1280x800 and not....what appears to be 1600x1200?
Thanks

I think you are right about doing the "exclude", but I couldn't decipher the information from that link... Notebook in question is a "Dell Latitude E6410" if that helps.
I got a bit more information from logging Re: Boot hang - Can I stop it looking for the wireless lan? but missed the line that probably contains the driver name!

Solaris 9 denies a telnet login

Similar Messages

Maybe you are looking for