Security Authentication for AIX TELNET

Aix telnet: Telnet in ibm aix, that is, remote control. In this regard, we need to emphasize security issues. In security control, we use the Telnet AUTHENTICATION System for filtering. Here we will introduce this content.

Authentication

If the system is configured for ipvos5 authentication, the telnet client will try authentication negotiation. The authentication negotiation used by telnet and the definitions of options and sub-options are defined in rfc 1416.

If the client and server agree to an authentication, they will exchange authentication information, including the account the client expects to access. This will be a local user, unless the-l flag is set.

If they fail to reach an agreement on the authentication information or fail, the telnet connection will continue with the standard connection, assuming standard AIX is configured ).

The remote host allows access only when all of the following conditions are met:

The local user has the current DCE credential.

The remote system accepts DCE creden as sufficient creden to access the remote account. For more information, see the kvalid_user function.

Example

In the following example, if you enter the tn command instead of the AIX telnet command, the command prompt is displayed as tn>.

To log on to the remote host host1 and perform terminal negotiation, enter:

Telnet host1 to log on to host1 as the terminal vt100 without terminal type negotiation), select one of the following methods:

Run the following command to set the EMULATE environment variable for the logon session, and then enter the AIX telnet command:

EMULATE = vt100; export EMULATE

Telnet host1

Use the-e flag to set the terminal type only for the telnet session:

Telnet-e vt100 host1

To log on to the remote host and check the telnet program status, enter:

Telnet host3 when the logon prompt appears, enter your logon ID and password. Press Ctrl-T to receive the telnet> prompt. Enter the following content after the prompt:

Status

Information similar to the following is displayed on the screen:

Connected to host3.

Operating in character-at-a-time mode.

Escape character is '^]'. After the sub-command is complete, press Enter to return to the remote prompt.

Once the logon is complete, you can issue the AIX telnet command. to log out of the system and close the connection, press Ctrl-D or enter exit.

Log on to the remote host using the tn3270 command, and enter:

The logon screen of the tn3270 hostname host should be displayed. then you can enter the logon ID and password. once the logon is complete, you can issue a command. press Ctrl-D or enter exit to exit the system and disconnect.