At 12:40 PM 6/28/00 -0700, Chuck Lam wrote:
>I telnet from one rh6.1 to another rh6.1 machine.  I
>got the prompt to ask me for the login and the
>password. I typed in the right password, but it said
>invalid password.  What have I missed ?

Any of a number of things. 

First, I doubt it said "invalid password"; I bet it said "Login incorrect".
For security reasons, telnet "error" messages are designed to be
uninformative. You don't want to tell someone who is trying to break into
your system that, say, he has guessed a legit account name but not its password.

The most likely reason for the failure is that the account you used is not
allowed to access via telnet. root, for example, can connect only to
"trusted" ports, the ones listed in /etc/securetty . For security reasons,
all modern Linus discritutions (all I've checked, anyway) limit the trusted
ports to the actual consoles.

Other telnet access can also be restricted, via (depending on your system)
/etc/login.access or stuff in /etc/pam.d/* files. Or, conceivably, your
telnetd process uses ordinary passwords and you have upgraded your system to
use shadow passwords (I can't recall when RH made the switch), or vice versa.

It's also possible, of course, that you are mistaken in thinking you entered
the correct userid and password.


--
------------------------------------"Never tell me the odds!"---
Ray Olszewski                                        -- Han Solo
Palo Alto, CA                                    [EMAIL PROTECTED]        
----------------------------------------------------------------


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.linux-learn.org/faqs

Reply via email to