Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-13 Thread Bob Johnson
On 2/12/10, Jason Lin taosheng@gmail.com wrote:
 I try this method, after set the password of toor,
 I  can't login with the account toor.

It is possible (I don't remember) that the toor account does not
have a shell in the default passwd file. If that's the problem, use
vipw to add the path to a shell as the last field on the line.  The
root account should provide a good example, or look at the line for
your own user account. /bin/csh should work for recent versions of
FreeBSD.

- Bob
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-13 Thread Matthew Seaman
On 13/02/2010 17:49, Bob Johnson wrote:

 It is possible (I don't remember) that the toor account does not
 have a shell in the default passwd file. If that's the problem, use
 vipw to add the path to a shell as the last field on the line.  The
 root account should provide a good example, or look at the line for
 your own user account. /bin/csh should work for recent versions of
 FreeBSD.

An empty field for the user shell in /etc/{master.,}passwd means the
account gets the default shell, which in the case of FreeBSD is /bin/sh.
 Shouldn't cause the observed problem.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.  7 Priory Courtyard, Flat 3
Black Earth Consulting   Ramsgate
 Kent, CT11 9PW
Free and Open Source Solutions   Tel: +44 (0)1843 580647



signature.asc
Description: OpenPGP digital signature


Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-13 Thread Chris Rees
On 13 February 2010 18:10, Matthew Seaman m.sea...@black-earth.co.uk wrote:
 On 13/02/2010 17:49, Bob Johnson wrote:

 It is possible (I don't remember) that the toor account does not
 have a shell in the default passwd file. If that's the problem, use
 vipw to add the path to a shell as the last field on the line.  The
 root account should provide a good example, or look at the line for
 your own user account. /bin/csh should work for recent versions of
 FreeBSD.

 An empty field for the user shell in /etc/{master.,}passwd means the
 account gets the default shell, which in the case of FreeBSD is /bin/sh.
  Shouldn't cause the observed problem.

        Cheers,

        Matthew


I would imagine then that /etc/ttys is set to 'insecure' for all.

Can you log in as root Jason?

Chris
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-13 Thread Lin Taosheng
yes, I login with toor as root successfully.

2010/2/14 Chris Rees utis...@googlemail.com:
 On 13 February 2010 18:10, Matthew Seaman m.sea...@black-earth.co.uk wrote:
 On 13/02/2010 17:49, Bob Johnson wrote:

 It is possible (I don't remember) that the toor account does not
 have a shell in the default passwd file. If that's the problem, use
 vipw to add the path to a shell as the last field on the line.  The
 root account should provide a good example, or look at the line for
 your own user account. /bin/csh should work for recent versions of
 FreeBSD.

 An empty field for the user shell in /etc/{master.,}passwd means the
 account gets the default shell, which in the case of FreeBSD is /bin/sh.
  Shouldn't cause the observed problem.

        Cheers,

        Matthew


 I would imagine then that /etc/ttys is set to 'insecure' for all.

 Can you log in as root Jason?

 Chris




-- 
Lin Taosheng
Mobile: 86-010-15801256127
MSN:   taosheng@gmail.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-12 Thread Jason Lin
I try this method, after set the password of toor,
I  can't login with the account toor.


Bogdan Webb bog...@pgn.ro 
??:c81e6afd1002102307l2b089a76p36a8d67d3085a...@mail.gmail.com...
 Edit the /etc/master.passwd and /etc/passwd records to change the uid and
 gid of the root account BUT FIRST MAKE SURE YOU ADD (or changed password
 of) ANOTHER UID0 ACCOUNT
 here's an example:
 etc/master.passwd:
 root:*PASSWORD HASH*:99:99::0:0:Charlie :/root:/bin/csh

 and /etc/passwd
 root:*:99:99:Charlie :/root:/bin/csh


 check the toor account it's already created by freebsd but it doesn't 
 have
 a password, 1st apply a password for that account, triple check that it's
 usable then edit the records (keep in mind that the 99 uid and 99gid in my
 examples are fake try giving your's the uid and gid of the nobody 
 account,
 or someother)

 cheers!
 2010/2/11 Anthony M. Rasat anthony.ra...@gmail.com

 Lin Taosheng wrote:

 Is that possible to implementated?

 No. I think not. But I have not tried it either.

 Can I ask what do you want to achieve? Because I had the same thought 
 once,
 concerning how to combat once-increasing script-driven SSH brute-force
 attack. But I was instead have a better solution using fail2ban to easily
 thwart those SSH brute force attack. Is that your situation?

 Regards,

 Anthony M. Rasat
 Manager - Technical, Network and Support Division
 PT. Jawa Pos National Network
 Graha Pena Jawa Pos Group Building, 5th floor
 Jln. Raya Kebayoran Lama 12, Jakarta Selatan 12210
 Indonesia.-
 Phone 02132185562
 Phone 081574217035
 Fax 02153651465
 Web http://www.jpnn.com
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org

 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org
 



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-10 Thread Anthony M. Rasat
Lin Taosheng wrote:

Is that possible to implementated?

No. I think not. But I have not tried it either.

Can I ask what do you want to achieve? Because I had the same thought once, 
concerning how to combat once-increasing script-driven SSH brute-force attack. 
But I was instead have a better solution using fail2ban to easily thwart those 
SSH brute force attack. Is that your situation?
 
Regards,

Anthony M. Rasat
Manager - Technical, Network and Support Division
PT. Jawa Pos National Network
Graha Pena Jawa Pos Group Building, 5th floor
Jln. Raya Kebayoran Lama 12, Jakarta Selatan 12210
Indonesia.-
Phone 02132185562
Phone 081574217035
Fax 02153651465
Web http://www.jpnn.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: HELP! Is that possible creating a user named root but acturallynot the administrator root

2010-02-10 Thread Bogdan Webb
Edit the /etc/master.passwd and /etc/passwd records to change the uid and
gid of the root account BUT FIRST MAKE SURE YOU ADD (or changed password
of) ANOTHER UID0 ACCOUNT
here's an example:
etc/master.passwd:
root:*PASSWORD HASH*:99:99::0:0:Charlie :/root:/bin/csh

and /etc/passwd
root:*:99:99:Charlie :/root:/bin/csh


check the toor account it's already created by freebsd but it doesn't have
a password, 1st apply a password for that account, triple check that it's
usable then edit the records (keep in mind that the 99 uid and 99gid in my
examples are fake try giving your's the uid and gid of the nobody account,
or someother)

cheers!
2010/2/11 Anthony M. Rasat anthony.ra...@gmail.com

 Lin Taosheng wrote:

 Is that possible to implementated?

 No. I think not. But I have not tried it either.

 Can I ask what do you want to achieve? Because I had the same thought once,
 concerning how to combat once-increasing script-driven SSH brute-force
 attack. But I was instead have a better solution using fail2ban to easily
 thwart those SSH brute force attack. Is that your situation?

 Regards,

 Anthony M. Rasat
 Manager - Technical, Network and Support Division
 PT. Jawa Pos National Network
 Graha Pena Jawa Pos Group Building, 5th floor
 Jln. Raya Kebayoran Lama 12, Jakarta Selatan 12210
 Indonesia.-
 Phone 02132185562
 Phone 081574217035
 Fax 02153651465
 Web http://www.jpnn.com
 ___
 freebsd-questions@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 freebsd-questions-unsubscr...@freebsd.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org