[HPADM] summary: telnetd stopped spawning

From owner-hpux-admin@DutchWorks.nl  Thu Feb  6 17:51:33 2003
Received: from dworks02.dutchworks.nl (dworks02.DutchWorks.nl [130.161.32.21])
	by hpux.its.tudelft.nl (8.9.3 (PHNE_25183)/8.9.3) with ESMTP id RAA16597
	for <muyzer@hpux.dutchworks.nl>; Thu, 6 Feb 2003 17:51:33 +0100 (MET)
Received: from localhost (daemon@localhost)
	by dworks02.dutchworks.nl (8.9.3 (PHNE_25183)/8.9.3) with SMTP id RAA03476;
	Thu, 6 Feb 2003 17:48:49 +0100 (MET)
Received: by dworks02.dutchworks.nl (bulk_mailer v1.8); Thu, 6 Feb 2003 17:48:44 +0100
Sender: hpux-admin-owner@DutchWorks.nl
Received: from hpux.its.tudelft.nl (hpux.its.tudelft.nl [130.161.32.17])
	by dworks02.dutchworks.nl (8.9.3 (PHNE_25183)/8.9.3) with ESMTP id RAA03434
	for <hpux-admin@dworks02.dutchworks.nl>; Thu, 6 Feb 2003 17:48:44 +0100 (MET)
Received: from mailhst2.its.tudelft.nl (mailhst2.its.tudelft.nl [130.161.34.250])
	by hpux.its.tudelft.nl (8.9.3 (PHNE_25183)/8.9.3) with ESMTP id RAA16580
	for <hpux-admin@DutchWorks.nl>; Thu, 6 Feb 2003 17:48:43 +0100 (MET)
Received: from col-msxproto2.col.missouri.edu (col-msxproto2.col.missouri.edu [128.206.3.152])
	by mailhst2.its.tudelft.nl (8.11.6/8.11.6) with ESMTP id h16Gme815256
	for <hpux-admin@DutchWorks.nl>; Thu, 6 Feb 2003 17:48:41 +0100 (MET)
Received: from col-mailnode03.col.missouri.edu ([128.206.3.233]) by col-msxproto2.col.missouri.edu with Microsoft SMTPSVC(5.0.2195.5329);
	 Thu, 6 Feb 2003 10:48:15 -0600
X-MimeOLE: Produced By Microsoft Exchange V6.0.6334.0
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----_=_NextPart_001_01C2CDFF.8AB2CCED"
Subject: [HPADM] summary: telnetd stopped spawning
Date: Thu, 6 Feb 2003 10:48:14 -0600
Message-ID: <2209664F1C807643B7FA01C8230C0F9902B5514A@col-mailnode03.col.missouri.edu>
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
Thread-Topic: summary: telnetd stopped spawning
Thread-Index: AcLN/4qycEc3xgalSeWWtcOTTAPgGg==
From: "Henrikson, John L." <HenriksonJ@missouri.edu>
To: <hpux-admin@DutchWorks.nl>
X-OriginalArrivalTime: 06 Feb 2003 16:48:15.0395 (UTC) FILETIME=[8B1AF730:01C2CDFF]
X-Orig-From: HenriksonJ@missouri.edu
Precedence: bulk

This is a multi-part message in MIME format.

------_=_NextPart_001_01C2CDFF.8AB2CCED
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_002_01C2CDFF.8AB2CCED"


------_=_NextPart_002_01C2CDFF.8AB2CCED
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I got several helpful responses from Rita Workman, V.T. Mueller, Ryan
and Bill Hassell, thanks to all of you..=20

=20

The most helpful was from Larry Scheetz, whose response I've included
below.. many thanks Larry..

=20

John Henrikson=20

University of Missouri-Columbia

=20

=20

=20

PROBLEM

Unable to telnet to HPUX server beyond a certain number of connections.
For example, "I have 60 users connected to this box via telnet; however,
when

60+

users try to login they receive a "connection refused" error message".
What is

the problem?   RESOLUTION

The problem is the system is running out of "PTYs". PTYs are used to
open telnet sessions. On 10.x systems they use PTYs(pseudo-terminal) and
11.x systems use PTYs that are pseudo-terminal and Streams-Based. You
should use the following steps correct this problems:

=20

This could be an issue with shells, security, or not enough telnet
sessions.

=20

1.  First ensure that telnet is an available service. You should see the

    following lines:

=20

vi /etc/services

telnet        23/tcp                # Virtual Terminal Protocol

=20

vi /etc/inetd.conf

telnet       stream tcp nowait root /usr/lbin/telnetd  telnetd

These lines should be uncommented.

=20

2. Telnet must be listening in order for you to make a connection

=20

netstat -a | grep *telnet.                  should return the line

 tcp        0      0  *telnet.      *.*    LISTEN

=20

3. If it is not "listening" or you had to make a modification to your

   inetd.conf file do the following:

inetd -c

=20

This rereads your inetd.conf file.  Now repeat step 2 to see if telnet
is listening.

=20

Shells:

Shells is a most common issue with telnet and ftp connection refused
messages. Create the following file on the system refusing the
connection:

vi /etc/shells        #create/edit this file to contain the following
valid

                       login shells#

/sbin/sh

/usr/bin/sh

/usr/bin/rsh

/usr/bin/ksh

/usr/bin/rksh

/usr/bin/csh

/usr/bin/keysh

/sbin/rsh

/sbin/ksh

/sbin/rksh

/sbin/csh

/sbin/keysh

=20

Test telnet after adding this file.

=20

=20

Security for telnet:

vi /var/adm/inetd.sec

=20

Look for a line that references telnet and the word allow or deny.  If
you see a line like that your system may be restricted from using this
service on this system.  Example of an entry:

=20

telnet      deny    192.23.4.3 193.14

this entry denies a specific host 192.23.4.3, and an entire subnet
193.14.

=20

telnet      allow    192.23.4.3 193.14

this entry allows only the host 192.23.4.3, and any hosts on the subnet
193.14. Everyone else is denied.

=20

Telnet sessions:

To check the number of telnet sessions you have available, on the box
refusing the connection do:

=20

ls /dev/pty |wc -w

ls /dev/ptym | wc -w

60 is the default,  if you see 60 as a response, yours has never been
increased and you may be running out of telnet sessions.

=20

To increase your telnet sessions, we need to increase the npty
paramater.  This is a kernel parameter so it will require a reboot.
Follow the 2 steps listed below:

=20

1. Use SAM --> Kernel --> Configurable Parameters

               npty     (10.20 and 11.0)

               nstrpty  (11.x only)

               nstrtel  (11.x only)

   set NPTY, NSTRPTY, and NSTRTEL to 512, save and reboot.

   NPTY, NSTRPTY, and NSTRTEL are the desired number of telnet sessions.

=20

2. Rebuild the special device files at the command prompt as follows:

=20

   insf -d ptys -n 512       512 being the number you set NPTY in SAM
(10.20

and

                             11.0)

   insf -d ptym -n 512       10.20 and 11.0)

=20

   insf -d pts -s 512 -e -v  (for 11.x only )

=20

   insf -d pty -n 512        (for 11.x only )

=20

=20

=20

That's it, your sessions have been increased to 512

=20

NOTE: 512 is just and example value that was used. You should determine
the amount of PTYs needed by looking at the average amount of users that
login to your system.

=20


------_=_NextPart_002_01C2CDFF.8AB2CCED
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">


<meta name=3DGenerator content=3D"Microsoft Word 10 (filtered)">

<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{font-family:Arial;
	color:windowtext;
	font-weight:normal;
	font-style:normal;
	text-decoration:none none;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>I got several helpful responses from Rita Workman, =
V.T. Mueller,
Ryan and Bill Hassell, thanks to all of you.. </span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>The most helpful was from </span></font><font =
face=3DArial><span
 style=3D'font-family:Arial'>Larry Scheetz</span></font><font =
face=3DArial><span
style=3D'font-family:Arial'>, whose response I&#8217;ve included below.. =
many
thanks Larry..</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>John Henrikson </span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>University of Missouri-Columbia</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3DArial><span =
style=3D'font-size:12.0pt;
font-family:Arial'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>PROBLEM</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Unable to telnet to HPUX server beyond a =
certain
number of connections. For example, &quot;I have 60 users connected to =
this box
via telnet; however, when</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>60+</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>users try to login they receive a =
&quot;connection
refused&quot; error message&quot;. What is</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>the problem?&nbsp;&nbsp; =
RESOLUTION</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>The problem is the system is running out of =
&quot;PTYs&quot;.
PTYs are used to open telnet sessions. On 10.x systems they use =
PTYs(pseudo-terminal)
and 11.x systems use PTYs that are pseudo-terminal and Streams-Based. =
You
should use the following steps correct this problems:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>This could be an issue with shells, security, =
or not
enough telnet sessions.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>1.&nbsp; First ensure that telnet is an =
available
service. You should see the</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp;&nbsp; following =
lines:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>vi /etc/services</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>telnet&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
23/tcp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;
# Virtual Terminal Protocol</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>vi /etc/inetd.conf</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>telnet&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
stream tcp
nowait root /usr/lbin/telnetd&nbsp; telnetd</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>These lines should be =
uncommented.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>2. Telnet must be listening in order for you =
to make
a connection</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>netstat -a | grep
*telnet.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
should return the line</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>&nbsp;tcp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp; =
*telnet.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
*.*&nbsp;&nbsp;&nbsp; LISTEN</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>3. If it is not &quot;listening&quot; or you =
had to
make a modification to your</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; inetd.conf file do the =
following:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>inetd -c</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>This rereads your inetd.conf file.&nbsp; Now =
repeat
step 2 to see if telnet is listening.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Shells:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Shells is a most common issue with telnet and =
ftp
connection refused messages. Create the following file on the system =
refusing
the connection:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>vi
/etc/shells&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #create/edit this =
file to
contain the following valid</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
login shells#</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/sbin/sh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/usr/bin/sh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/usr/bin/rsh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/usr/bin/ksh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/usr/bin/rksh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/usr/bin/csh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/usr/bin/keysh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/sbin/rsh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/sbin/ksh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/sbin/rksh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/sbin/csh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>/sbin/keysh</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Test telnet after adding this =
file.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Security for telnet:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>vi /var/adm/inetd.sec</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Look for a line that references telnet and =
the word
allow or deny.&nbsp; If you see a line like that your system may be =
restricted
from using this service on this system.&nbsp; Example of an =
entry:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>telnet&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
deny&nbsp;&nbsp;&nbsp; 192.23.4.3 193.14</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>this entry denies a specific host 192.23.4.3, =
and an
entire subnet 193.14.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>telnet&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
allow&nbsp;&nbsp;&nbsp; 192.23.4.3 193.14</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>this entry allows only the host 192.23.4.3, =
and any
hosts on the subnet 193.14. Everyone else is denied.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>Telnet sessions:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>To check the number of telnet sessions you =
have
available, on the box refusing the connection do:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>ls /dev/pty |wc -w</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>ls /dev/ptym | wc -w</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>60 is the default,&nbsp; if you see 60 as a
response, yours has never been increased and you may be running out of =
telnet
sessions.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>To increase your telnet sessions, we need to
increase the npty paramater.&nbsp; This is a kernel parameter so it will
require a reboot. Follow the 2 steps listed below:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>1. Use SAM --&gt; Kernel --&gt; Configurable
Parameters</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;
npty&nbsp;&nbsp;&nbsp;&nbsp; (10.20 and 11.0)</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;
nstrpty&nbsp; (11.x only)</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;
nstrtel&nbsp; (11.x only)</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; set NPTY, NSTRPTY, and NSTRTEL =
to 512,
save and reboot.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; NPTY, NSTRPTY, and NSTRTEL are =
the
desired number of telnet sessions.</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>2. Rebuild the special device files at the =
command
prompt as follows:</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; insf -d ptys -n
512&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 512 being the number you set =
NPTY in
SAM (10.20</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>and</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier =
New"'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;
11.0)</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; insf -d ptym -n
512&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 10.20 and =
11.0)</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; insf -d pts -s 512 -e -v&nbsp; =
(for
11.x only )</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;&nbsp; insf -d pty -n
512&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;(for 11.x only =
)</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>That's it, your sessions have been increased =
to 512</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>&nbsp;</span></font></p>

<p class=3DMsoNormal><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:10.0pt;
font-family:"Courier New"'>NOTE: 512 is just and example value that was =
used.
You should determine the amount of PTYs needed by looking at the average =
amount
of users that login to your system.</span></font></p>

<p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span =
style=3D'font-size:
12.0pt'>&nbsp;</span></font></p>

</div>

</body>

</html>
=00
------_=_NextPart_002_01C2CDFF.8AB2CCED--

------_=_NextPart_001_01C2CDFF.8AB2CCED
Content-Type: text/x-vcard;
	name="John Henrikson (Henrikson, John L.).vcf"
Content-Transfer-Encoding: base64
Content-Description: John Henrikson (Henrikson, John L.).vcf
Content-Disposition: attachment;
	filename="John Henrikson (Henrikson, John L.).vcf"
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------_=_NextPart_001_01C2CDFF.8AB2CCED--

--
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)