Norm Jacobs <[email protected]> writes:

[...]

>    2. Configure pam(3PAM) to allow sshd to let you login to a role directly.
>            /etc/pam.conf
>                  sshd-kbdint   account   required   pam_unix_account.so.1

Haa... that was the baby... thanks.

But...er I already feel the noose tightening..

> I know that you don't want to hear it, but DON'T SSH to ROOT

Ok, I got the warning...  but don't be too worried because if I end up
running  something like `rm -rf /$SomeUnexpectedlyEmptyVar'

It's a single user machine so no one else will be hurt by my bumbling.
There will be no injured 3rd parties after your hide...hehe.

(A moments reflection will tell readers here that I have probably
done the very thing shown above, or it wouldn't come to mind in this
reply, and they'd be right, but yet I survived)

Seriously though I don't really understand why something that should
end with a few warnings has to be embedded into the OS.  

I can't count the times I've read on these forums something to the
effect... that `solaris expects you to know what your are doing', when
someone complains about getting bit by something..

People should be trusted to use root account... in ways they see fit.

Even dimwits like me can figure out how to use something in a
non-injurious way after while.

Will we have some warning embedded in `rm' that only lets it run after
you've answered 4-5 queries `are you sure you want to delete that
file'. "Are you really really sure" etc etc.

That sort of stuff has always been up to the user ... to use -i if
they want.

OK.. Ok, onwards and upwards... thanks again for the input.

_______________________________________________
opensolaris-discuss mailing list
[email protected]

Reply via email to