Re: [Ltsp-discuss] Ltpsinfod - security problem?

[Joe Auerbach]

You're saying that once they are logged ino the ltsp machine they can then initiate a tenet connection to that machine via the ltsp login (effectively telnetting to their own ip address and using their own login and password) to shut down the machine? There's a few options.  You can just shut down telnet.  They wqould leave ssh and IIRC ssh won't shut down a machine by default (it will try to shut down the machine you're sitting at, which will be prohibited as well, or should).  Why run telnet anyway?  John Horne wrote: On Tue, November 8, 2005 03:18, Jim McQuillan wrote: the 'reboot' functionality of ltspinfod is disabled by default. You'd have to have 'ALLOW_SHUTDOWN = Y' in your lts.conf file to enable the rebooting capability. So, if you want to secure your terminal from being rebooted, then you should just make sure you do NOT have that entry in your file. Hello, Correct this entry is set in the lts.conf file because we DO want to reboot the LTSP clients. However, as it stands anyone can reboot them simply by initiating a telnet connection - that we do not want. We only want the LTSP server to be allowed to reboot them. John. -- joe auerbach systems administrator pcb / rossman and co 614-523-4150 [EMAIL PROTECTED] ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net