hello naganathan,

Well linux by default does not do anything it is just
the kernel.It is the progs an scripts which do things.
In most distributions of linux root is not allowed to
telnet or login directly in any form from outside the
local machine due to seceurity reasons.It is due to
the tcp wrappers which controlls the telnet,ftp,rlogin
rexec etc daemons from INETD.this wrapper before
initiating a daemon it dows a reverse name lookup and
checks to see the hosts dont exist in /etc/hosts.deny
etc.for root login it checks a file called
/etc/securetty which lists the list of tty s root can
login from.this file contains only the virtual ttys
got using mingetty in the local machine whereas telnet
tty exist in /dev/pts.so either add ttys to the
securetty file from which root should be able to login
or remove the /etc/securetty file then root can login
from any where.another secure alternative is to
install sshd the secure shell daemon and telnet to
port 22.this is secure bacause data is transfered in
encrypted form,
whereas in plain telnet ftp if U sniff the packets
using a tool like tcpdump u can actually see password
in clear text.


IF U DID'nt WANT THAT CRAP ON TOP DELETE
/ETC/SECURETTY
ROOT CAN LOGIN FROM ANYWHERE.

all the best
regards

sanjeev


U had posted the following to LUG.

HI
I think by default linux machines dont allow root to
log on using telnet. I
would like to know the details regarding the file to
edit and the necessary
changes ,so that root can log on using telnet

Thanks
Naganathan      


__________________________________________________
Do You Yahoo!?
Get Yahoo! Mail - Free email you can access from anywhere!
http://mail.yahoo.com/

-----------------------------------------------------------------------
The LIH mailing list archives are available at:
http://lists.linux-india.org/cgi-bin/wilma/linux-india-help

Reply via email to