淺談krb5-telnet問題的解決方法
Telnet的遠(yuǎn)程服務(wù)，是很多企業(yè)都需要的。不少管理員也是非常關(guān)注這方面的學(xué)習(xí)。那么針對(duì)Linux系統(tǒng)的多樣版本，如何Telnet？那么今天我們對(duì)這個(gè)系統(tǒng)的krb5-telnet問題進(jìn)行一下講解。那么具體我們從兩方面來解決：
一、關(guān)閉selinux （setenforce 0）影響不大
二、關(guān)閉防火墻 （iptables -F 或service iptables stop）
Red Hat Enterprise Linux 5 telnet開啟過程
1、確定你的telnet服務(wù)打開沒有:
- [root@111 ~]# chkconfig --list|grep telnet
- ekrb5-telnet: off
- krb5-telnet: off
- [root@111 ~]#
- 注意檢查結(jié)果這里是關(guān)閉狀態(tài)
2、打開telnet服務(wù):
- [root@111 ~]# chkconfig krb5-telnet on
- [root@111 ~]# chkconfig --list|grep telnet
- ekrb5-telnet: off
- krb5-telnet: on
- 檢查已經(jīng)被打開了
3、修改登陸文件securetty,主要增加要登陸的終端點(diǎn)
- [root@111 ~]# vi /etc/securetty
- 增加如下幾行:
- pts/1
- pts/2
- pts/3
- pts/4
- pts/5
- ……
（或者取用此方法:mv /etc/securetty /etc/securetty.bak 將文件去除）保存退出即可,此時(shí)只能以非根用戶登陸,如要以root用戶登陸,下文會(huì)有說明.注意:如果同時(shí)將chkconfig ekrb5-telnet on.會(huì)提示Unencrypted connection refused. Goodbye.Connection closed by foreign host.
看錯(cuò)誤信息好像是說的為加密的連接被拒絕,查看了他的配置文件也沒發(fā)現(xiàn)有什么關(guān)于加密的選項(xiàng),而且配置文件也很正確,于是到google上去搜索了一大圈,***終于找到一個(gè)老外寫的一個(gè)解決方法:
I really needed a bit of guidance and you provided it./sbin/chkconfig --list |grep telnetThe above command told me I had both krb5-telnet and ekrb5-telnet, andalso the installed telnet all on. Initially I did not know what theywere all for. After turning them on and off and testing my telnetconnection from another box I realised that "ekrb5-telnet" was theencrypted telnet server that I needed to turn off to run "krb-telnet"which allowed non-encrypted telnet connections.eg /sbin/chkconfig ekrb5-telnet offThanks for your help.
原來ekrb5-telnet是一個(gè)需要加密的telnet服務(wù),必須有Kerberos服務(wù)器才行,把這個(gè)服務(wù)啟動(dòng)上當(dāng)然就需要加密了.解決方法:將 /etc/xinetd.d/ekrb5-telnet里面的disable改成=yes,再重啟xinetd服務(wù)service xinetd restart就OK了!相當(dāng)于將ekrb5-telnet關(guān)掉而已,注意service是紅帽系列的命令,非標(biāo)準(zhǔn)命令,相應(yīng)操作可以如下實(shí)現(xiàn):/etc/init.d/xinetd restart."/etc/xinetd.d/ekrb5-telnet"/etc/xinetd.d/守護(hù)進(jìn)程的啟動(dòng)位置.
內(nèi)容自出:http://blog.163.com/mail_zcw/blog/static/412607742008413114453290/
