Telnet and RHEL4

[Allen, Jack]

-----Original Message-----
From: Michael Scully [mailto:agentscully at flexiblestrategies.com] 
Sent: Tuesday, December 27, 2005 5:17 PM
To: 'General Red Hat Linux discussion list'
Subject: Telnet and RHEL4


Greetings:

	I recently installed Enterprise 4 (ES) with Update 2 on a clean
system.  The user has older terminal emulators that only support telnet (not
SSH).  But this behavior is new:
-------------------------------------------------------------
Red Hat Enterprise Linux ES release 4 (Nahant Update 2)
Kernel 2.6.9-22.0.1.ELsmp on an i686
login: scully
Password:
Your default context is user_u:system_r:unconfined_t.

Do you want to choose a different one? [n]
--------------------------------------------------------------
	If I answer no, the rest of the .bash_profile runs fine.  I'm not
sure what is configured to create this prompt.  Has anyone else seen it?  If
I answer affirmative, I get the following choices:
--------------------------------------------------------------
Do you want to choose a different one? [n]y
[1] user_u:system_r:unconfined_t
[2] user_u:system_r:httpd_t
[3] user_u:system_r:dhcpd_t
[4] user_u:system_r:initrc_t
[5] user_u:system_r:ldconfig_t
[6] user_u:system_r:mailman_mail_t
[7] user_u:system_r:mysqld_t
[8] user_u:system_r:named_t
[9] user_u:system_r:ndc_t
[10] user_u:system_r:nscd_t
[11] user_u:system_r:ntpd_t
[12] user_u:system_r:pegasus_t
[13] user_u:system_r:portmap_t
[14] user_u:system_r:postgresql_t
[15] user_u:system_r:snmpd_t
[16] user_u:system_r:squid_t
[17] user_u:system_r:syslogd_t
[18] user_u:system_r:winbind_t
[19] user_u:system_r:ypbind_t
Enter number of choice: 
--------------------------------------------------------------

Scully


=================================================
	I had the same problem and posted in the pam-list and
fedora-selinux-list and finally got an answers from someone. Anyway look for
the word "multiple" in the files in /etc/pam.d. I think you will find it in
"remote" and maybe one or two other files. Remove it and you will not get
the prompt anymore. You do not have to reboot or restart anything because
the files are read each time telnetd and login run.

	The person that replied directly to me said it should be corrected
in the up stream of pam or maybe it was selinux, but will take a while to be
in some update.

Jack Allen