[cobalt-users] SSH and Telnet on a Qube3

[Parker Morse <morse@xxxxxxxxxxx>]

I'm continuing my efforts to tighten down security on my Qube3. I just
installed Taco's OpenSSH 3.0.2 pkg, for one thing. I'm trying to get to a
point where I can turn off telnetd completely, of course. But here's my
problem.

With Telnet turned off completely, I am able to get a shell via SSH ONLY as
admin. If I open an SSH connection as an unprivileged user, the Qube says,
"Telnet not permitted" and closes the connection. Well, sure Telnet's not
permitted, that was the point. But why can't I open a shell that's not
Telnet?

Another data point: with the admin SSH window open, I tried su-ing to an
unprivileged user. Same error.

I found someone else asking the same question in the archives; the answer
was: "You has to set Shell-access for the user in site/serveradmin." Maybe
I'm a little dense, but I need some more explanation for that to be helpful
to me. It does sound likely that I need to modify a config file somewhere.

Thanks,

pjm