Re: root telnet

1999-01-22 Thread Matus \"fantomas\" Uhlar
-> > -> How to make telnetd accept root login ?
-> > 
-> > are you nuts ?
-> > use ssh at least...
-> 
-> If you really must allow root access, after adding the relevent entries to
-> the /etc/securrity file. You *could* then restrict root access to limited 
-> hosts via the /etc/login.access file. (OK I guess you could do this via 
-> hosts.allow/deny too).
-> 
-> In login.access add a line like...
-> 
-> -:root:ALL EXCEPT some.host1 some.other.host LOCAL
-> 
-> That will allow root logins only from local (console) and some.host1 and
-> some.other.host

and I'll recommend to define in sshd.conf:

UseLogin yes

-> Might not be the best way, but better than just allowing root access from
-> anywhere (suicide).

-> Of course you could always login as another user and then 'su -' to root.

That's the preferred way by 9 of 10 sysadmins ;-)


-- 
 Matus "fantomas" Uhlar, sysadmin at Telenor Internet Kosice, Slovakia
 BIC coord for *.sk; admin of netlab.irc.sk; co-admin of irc.felk.cvut.cz
 Silvester Stallone: Father of the RISC concept.


Re: root telnet

1999-01-21 Thread Nidge Jones
On Thu, Jan 21, 1999 at 03:59:02PM +0100, Matus fantomas Uhlar wrote:

> -> How to make telnetd accept root login ?
> 
> are you nuts ?
> use ssh at least...

If you really must allow root access, after adding the relevent entries to
the /etc/securrity file. You *could* then restrict root access to limited 
hosts via the /etc/login.access file. (OK I guess you could do this via 
hosts.allow/deny too).

In login.access add a line like...

-:root:ALL EXCEPT some.host1 some.other.host LOCAL

That will allow root logins only from local (console) and some.host1 and
some.other.host

Might not be the best way, but better than just allowing root access from
anywhere (suicide).

Of course you could always login as another user and then 'su -' to root.

Chow

-- 
Nidge Jones


Re: root telnet

1999-01-21 Thread Armin Wegner
> 
> How to make telnetd accept root login ?
> 
Do not do that.
> 
> Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED] < /dev/null
> 
> 


Re: root telnet

1999-01-21 Thread Lawrence Walton
Agreed most people login as a normal user and then SU.

*--* Mail: [EMAIL PROTECTED]
*--* Voice: 425.739.4247
*--* Fax: 425.827.9577
*--* HTTP://www.otak-k.com/~lawrence/
--
- - - - - - O t a k  i n c . - - - - - 



On Thu, 21 Jan 1999, Matus "fantomas" Uhlar wrote:

> -> How to make telnetd accept root login ?
> 
> are you nuts ?
> use ssh at least...
> -- 
>  Matus "fantomas" Uhlar, sysadmin at Telenor Internet Kosice, Slovakia
>  BIC coord for *.sk; admin of netlab.irc.sk; co-admin of irc.felk.cvut.cz
>  "The box said 'Requires Windows 95 or better', so I bought a Macintosh".
> 
> 
> -- 
> Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED] < /dev/null
> 
> 


Re: root telnet

1999-01-21 Thread Matus \"fantomas\" Uhlar
-> How to make telnetd accept root login ?

are you nuts ?
use ssh at least...
-- 
 Matus "fantomas" Uhlar, sysadmin at Telenor Internet Kosice, Slovakia
 BIC coord for *.sk; admin of netlab.irc.sk; co-admin of irc.felk.cvut.cz
 "The box said 'Requires Windows 95 or better', so I bought a Macintosh".


Re: root telnet

1999-01-21 Thread Remco van de Meent
UF Marpaung wrote:
> How to make telnetd accept root login ?

Have a look at the manual page securetty(5) and edit /etc/securetty.


HTH,
 -Remco


root telnet

1999-01-21 Thread UF Marpaung
How to make telnetd accept root login ?

Thanks,
UFM