Unix Programming - Howto identify the telnet user

This is Interesting: Free IT Magazines  
Home > Archive > Unix Programming > January 2004 > Howto identify the telnet user





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Howto identify the telnet user
Jai

2004-01-23, 5:21 pm

How can I identify the user who had telnet'ed into a server. In the server
all the users are given with a common user ID. I know that I can get the IP
address of the user. But is there a way to identify the actual user who had
telnet'ed into the server.

Thanks



Victor Wagner

2004-01-23, 5:21 pm

Jai <uxcore@yahoo.co.in> wrote:
: How can I identify the user who had telnet'ed into a server. In the server
: all the users are given with a common user ID. I know that I can get the IP
: address of the user. But is there a way to identify the actual user who had
: telnet'ed into the server.

You have to define term "actual user" first.

If "actual user" is "person sitting at the Windows machine with API
x.x.x.x", you already know solution.

If you mean something else, you should state it.

If you want to find local user name of person who've started telnet on other
Unix machine, it is what ident protocol is for. Of course you need
cooperation with system administrator of that machine - he should run
ident daemon and allow ident requests from your server.






--
/* And you'll never guess what the dog had */
/* in its mouth... */
-- Larry Wall in stab.c from the PERL source code
chris berg

2004-01-23, 5:21 pm

Jai <uxcore@yahoo.co.in> wrote:
quote:

> How can I identify the user who had telnet'ed into a server. In the server
> all the users are given with a common user ID. I know that I can get the IP
> address of the user. But is there a way to identify the actual user who had
> telnet'ed into the server.



your logs should contain this information if after-the-fact analysis is all
you need.
but if you need to be able to identify this in a login script or some other
way within the shell, i have had success doing so by slightly modifying the
tcpwrappers source to set an environment variable if the connection was to
the telnet service. in most cases (depending on the os), this variable
will still be there when the shell is excuted, and you can test for its
existence. this worked for me on solaris, but not hp-ux.

Barry Margolin

2004-01-23, 5:21 pm

In article <4HwHb.155468$8y1.463421@attbi_s52>,
"Jai" <uxcore@yahoo.co.in> wrote:
quote:

> How can I identify the user who had telnet'ed into a server. In the server
> all the users are given with a common user ID. I know that I can get the IP
> address of the user. But is there a way to identify the actual user who had
> telnet'ed into the server.



If you install TCP Wrappers, I believe it can be configured to perform
an IDENT query on incoming connections, and include the response in the
log. Of course, the usefulness of this depends on whether the client
machines are running identd and how trustworthy they are (if the user
has root access to his workstation, he can make identd give any answer
he wants).

If you want better authentication, use a secure protocol like ssh.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com