Re: Help: Unable to change to SU through SSH

2006-05-13 Thread Nils Vogels
Maan Jee wrote on 13-05-2006 10:31:
 Hi

 I have created a user admin and using that to login through SSH from a
 remote machine. But I CANNOT su, change to the root login? How can I do
 that?
Add the user admin to the wheel group in /etc/groups.

 To Install a Web Server, which distribution I should install, User or
 other?
I always install the bare minimum and then goto ports and install the
apache port.

HTH  HAND !

Nils
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help: Unable to change to SU through SSH

2006-05-13 Thread Adrian Pavone

Maan Jee wrote:


Hi

I have created a user admin and using that to login through SSH from a
remote machine. But I CANNOT su, change to the root login? How can I do
that?

To Install a Web Server, which distribution I should install, User or 
other?


thanks

vj
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]




The user admin is a member of the group wheel is he?
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help: Unable to change to SU through SSH

2006-05-13 Thread John . Dickinson
Nils Vogels wrote on 13/05/2006 09:43:24:

 Maan Jee wrote on 13-05-2006 10:31:
  Hi
 
  I have created a user admin and using that to login through SSH from 
a
  remote machine. But I CANNOT su, change to the root login? How can I 
do
  that?
 Add the user admin to the wheel group in /etc/groups.

I would recommend that you dont create an admin user. Create normal user 
accounts named after the user who will be logging in. Add users who will 
need to be able to do admin tasks to the wheel group. Then install sudo 
and configure it to allow users in the wheel group to run commands as 
root.

sudo has many advantages over using su. 
1. It logs every action so you can find out what you and other admin users 
did. This gives an audit trail and is very useful when you forget how you 
did something.
2. It puts a time limit on how long a user can run root tasks without 
re-entering their password. This prevents a user from forgetting they are 
root and leaving an unattended root console when they go to get a coffee.
3. You can, if necessary, control which commands a user can run as root.

Hope this helps
John
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Help: Unable to change to SU through SSH

2006-05-13 Thread Kevin Kinsey

[EMAIL PROTECTED] wrote:


I would recommend that you dont create an admin user. Create normal user 
accounts named after the user who will be logging in. Add users who will 
need to be able to do admin tasks to the wheel group. Then install sudo 
and configure it to allow users in the wheel group to run commands as 
root.




The reason this is a Good Thing(tm):  a large number of in the wild
exploit scripts/bots/programs already attempt to use a admin username
in their attempts to break your security (also, 'root', 'administrator',
'webmaster', 'bob', 'joe', 'fred', 'test', etc.).

I've yet to see one that tries to log in as manjee, though, unless
it has parsed the username as part of an e-mail address in a web site
or server error page.  In e-mail, aliases to actual user accounts
should rule the day.

Kevin Kinsey
--
It is through symbols that man consciously or unconsciously
lives, works and has his being.
-- Thomas Carlyle

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]