Re: [expert] Remote Access of Root

2000-07-06 Thread David Talbot

You can telnet in as root if you really want to, all you have to do is (as root
of course)

vi /etc/securetty
At the end of the file append:
0
1
2
3
4
5
6
7
8
9
0

What this file does is say what ttys are allowed to login as root. Doing the
above essentially allows all. Not suggested for a production system, but quite
useful otherwise.

-David Talbot

On Wed, 05 Jul 2000, you wrote:
> You cannot telnet in as root.  Telnet in as a regular user the su to root.
> Even better USE SSH.  SSH encrypts the connection and allows root log in!
> - Original Message -
> 
> > I have Mandrake 7.1 up and running and for maintenance purposes I want to
> > log on remotely as root for telnet and ftp from another system.
> >
> > Right now this seems to be defeated by the system. Can I change this?
> >




RE: [expert] Remote Access of Root

2000-07-06 Thread Jeroen Verhoeven

Do a 'su -' to have the same path and environment as root.

-Original Message-
From: Ken Wilson [mailto:[EMAIL PROTECTED]]
Sent: woensdag 5 juli 2000 15:39
To: [EMAIL PROTECTED]
Subject: RE: [expert] Remote Access of Root


Log in as a regular user to the remote machine and then do an 'su' to root
once you're logged in.

-Original Message-
From: Richard Fiedler [mailto:[EMAIL PROTECTED]]
Sent: July 5, 2000 5:25 AM
To: [EMAIL PROTECTED]
Subject: [expert] Remote Access of Root


I have Mandrake 7.1 up and running and for maintenance purposes I want to
log on remotely as root for telnet and ftp from another system.

Right now this seems to be defeated by the system. Can I change this?




Re: [expert] Remote Access of Root

2000-07-05 Thread Nightwriter

All,
Forgive me for butting in on this one but I ran into the same situation 
on 7.0 when I chose a security level above medium on the install and here 
is what I did to get telnet et al back

1.  uncomment the lines in inetd.conf concerning telnet and ftp.
2.  uncomment the telnet and ftp lines in /etc/services.
2.  install telnet server package.  It didn't get installed, without it 
telnet doesn't work and I don't think ssh will either.
3.  install ftp client (wu-ftpd for example and be sure and grab the new 
one it seemed to need this even though I had scp)
4.  at the prompt type killall -HUP inetd to restart inetd.

This is what worked for me, hope it works for you.

Nightwriter

At 10:26 AM 7/5/00, you wrote:
>On Wed, 5 Jul 2000, Richard Fiedler wrote:
>
> > Date: Wed, 05 Jul 2000 15:24:46 +0300
> > From: Richard Fiedler <[EMAIL PROTECTED]>
> > Reply-To: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Subject: [expert] Remote Access of Root
> >
> > I have Mandrake 7.1 up and running and for maintenance purposes I want to
> > log on remotely as root for telnet and ftp from another system.
> >
>
>edit /etc/securetty
>
>or better yet, switch to openssh, www.openssh.org
>and use sftp, on ftp://sunsite.uio.no/pub/linux/Mandrake-crypto
>
> > Right now this seems to be defeated by the system. Can I change this?
> >
>
>--
>Regards,
>
>Ellick Chan
>[EMAIL PROTECTED]
>Jul 5
>




Re: [expert] Remote Access of Root

2000-07-05 Thread Civileme

Richard Fiedler wrote:

> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
>
> Right now this seems to be defeated by the system. Can I change this?

Ummm,

ssh is better than telnet for your purposes, I would say.

Webmin installation will allow you to use telnet nicely as well as control a
host of other things remotely (including server settings such as ftp) and
can be very dangerous if you do not set it up properly (as a potential
security hole).  But login via telnet remotely as an ordinary user and then
su to root to do the things you need--it works.

Civileme





RE: [expert] Remote Access of Root

2000-07-05 Thread Frank Meurer

On Wed, 5 Jul 2000, Richard Fiedler wrote:

> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
> 
> Right now this seems to be defeated by the system. Can I change this?

1.) Never ever login as root!
2.) If you still want it:
- check out /etc/securetty (delete it to set all ttys as "secure")
  ("best" securetty has only one line: tty1)
- maybe check /etc/shells (checked by ftpd for valid user shell)
- check /etc/inetd.conf
- check /etc/hosts.deny and /etc/hosts.allow
3.) on telnet and ftp your password is sent readable and unencrypted over
the net, so please (please!) use openssh:
- ssh instead of telnet
- scp instead of ftp

regards,
Frank

-
Sending unsolicited commercial email to this address may be a violation
of the Washington State Consumer Protection Act, chapter 19.86 RCW.
Das Verschicken unverlangter kommerzieller email an diese Adresse ist
verboten (LG Traunstein, 2 HK O 3755/97 vom 14.10.1997, CR 1998, 171f).

(Frank Meurer, <[EMAIL PROTECTED]>, PGP ID: 0x5E756DA8)




RE: [expert] Remote Access of Root

2000-07-05 Thread John Aldrich

On Wed, 05 Jul 2000, you wrote:
> Log in as a regular user to the remote machine and then do an 'su' to root
> once you're logged in.
> 
> -Original Message-
> From: Richard Fiedler [mailto:[EMAIL PROTECTED]]
> Sent: July 5, 2000 5:25 AM
> To: [EMAIL PROTECTED]
> Subject: [expert] Remote Access of Root
> 
> 
> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
> 
> Right now this seems to be defeated by the system. Can I change this?
>
OR, use SSH and SFTP to accomplish the same thing with one step
instead of two. :-)
John




RE: [expert] Remote Access of Root

2000-07-05 Thread Matt Stegman

Or better yet, install SSH, so your sessions are encrypted, and you're not
sending your root password in plaintext all over the Internet.

-Matt Stegman
<[EMAIL PROTECTED]>

On Wed, 5 Jul 2000, Ken Wilson wrote:

> Log in as a regular user to the remote machine and then do an 'su' to root
> once you're logged in.
> 
> -Original Message-
> From: Richard Fiedler [mailto:[EMAIL PROTECTED]]
> Sent: July 5, 2000 5:25 AM
> To: [EMAIL PROTECTED]
> Subject: [expert] Remote Access of Root
> 
> 
> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
> 
> Right now this seems to be defeated by the system. Can I change this?
> 




Re: [expert] Remote Access of Root

2000-07-05 Thread Sevatio Octavio

Log on as regular user and then switch over to SU.

Seve

-Original Message-
From: Richard Fiedler <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Wednesday, July 05, 2000 6:21 AM
Subject: [expert] Remote Access of Root


>I have Mandrake 7.1 up and running and for maintenance purposes I want to
>log on remotely as root for telnet and ftp from another system.
>
>Right now this seems to be defeated by the system. Can I change this?
>
>




Re: [expert] Remote Access of Root

2000-07-05 Thread Ellick Chan

On Wed, 5 Jul 2000, Richard Fiedler wrote:

> Date: Wed, 05 Jul 2000 15:24:46 +0300
> From: Richard Fiedler <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: [expert] Remote Access of Root
> 
> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
>

edit /etc/securetty

or better yet, switch to openssh, www.openssh.org
and use sftp, on ftp://sunsite.uio.no/pub/linux/Mandrake-crypto
 
> Right now this seems to be defeated by the system. Can I change this?
> 

-- 
Regards,

Ellick Chan
[EMAIL PROTECTED]
Jul 5





Re: [expert] Remote Access of Root

2000-07-05 Thread Alexander Skwar

On Wed, Jul 05, 2000 at 03:24:46PM +0300, Richard Fiedler wrote:
> Right now this seems to be defeated by the system. Can I change this?

I suppose you could, but the "normal" way is to login as user and then to
"su" to the root account only when needed.

Alexander Skwar
-- 
Homepage:   http://www.digitalprojects.com
Sichere Mail?   Mail an [EMAIL PROTECTED] fuer GnuPG Keys
ICQ:7328191

 PGP signature


Re: [expert] Remote Access of Root

2000-07-05 Thread Cecil Watson

You cannot telnet in as root.  Telnet in as a regular user the su to root.
Even better USE SSH.  SSH encrypts the connection and allows root log in!
- Original Message -

> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
>
> Right now this seems to be defeated by the system. Can I change this?
>




Re: [expert] Remote Access of Root

2000-07-05 Thread Hoyt


- Original Message -
From: "Richard Fiedler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 05, 2000 8:24 AM
Subject: [expert] Remote Access of Root


> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
>
> Right now this seems to be defeated by the system. Can I change this?
>


The traditional approach is to log on as a regular user, then su to root
once there. Easier tham changing the program.

Hoyt





Re: [expert] Remote Access of Root

2000-07-05 Thread jlemay

> I have Mandrake 7.1 up and running and for maintenance purposes I want 
to
> log on remotely as root for telnet and ftp from another system.
> 
> Right now this seems to be defeated by the system. Can I change this?
> 


I'm not sure in which of two places the problem lies. First, if you 
cannot login at all via ftp or telnet, check /etc/inetd.conf and (I 
think) /etc/services to make sure these apps are available. If they are 
enabled and you cannot login as root (which is highly likely), you can 
telnet in as a normal user and "su" to root. I'm not sure how to solve 
this issue for ftp access.

You may want to consider installing ssh (OpenSSH for a business 
environment - I believe that one is free for commercial use) and using it 
instead of telnet since data will be encrypted as it passes over the 
network. With telnet all data - passwords and all - are sent in clear 
text. Again, I don't know much about ftp. However, a quick search on 
freshmeat may turn up some secure ftp client/server.

One last tip if you are using Windows clients to telnet or ssh into your 
*nix servers, check out CRT as a replacement for telnet or SecureCRT for 
a ssh client for Windows. It's an excellent terminal app - much better 
than Windows telnet!


-
This message was sent using MI-Webmail.
No matter where you are, never lose touch.
Get your Email using MI-Webmail.
http://www.monmouth.com/





Re: [expert] Remote Access of Root

2000-07-05 Thread dallard

Richard

 I think that the defaults for telnet and FTP can be changed to allow
root access. However I do not recommend this.
You should create another account with limited privileges that you
ftp/telnet into, and then su to root. This is a lot safer, and does not
require you to modify any files.
Also if you want an even more secure connection you can install SSH. That
will encrypt your sessions and will not pass plain text passwords as FTP and
telnet do.

  Thanks

   Dany Allard


Richard Fiedler wrote:

> I have Mandrake 7.1 up and running and for maintenance purposes I want to
> log on remotely as root for telnet and ftp from another system.
>
> Right now this seems to be defeated by the system. Can I change this?


begin:vcard 
n:Allard;Dany
tel;fax:+1.403.253.5580
tel;work:+1.403.253.5531
x-mozilla-html:FALSE
url:www.alterna.com
org:Alterna Technolies Group Inc.;Shared Service Center
version:2.1
email;internet:[EMAIL PROTECTED]
title:Technology Analyst
adr;quoted-printable:;;Alterna Technologies Group Inc.=0D=0ASuite 200, 5970 Centre Street SE;Calgary;Alberta;T2H 0C1;Canada
x-mozilla-cpt:;0
fn:Dany Allard
end:vcard



RE: [expert] Remote Access of Root

2000-07-05 Thread Ken Wilson

Log in as a regular user to the remote machine and then do an 'su' to root
once you're logged in.

-Original Message-
From: Richard Fiedler [mailto:[EMAIL PROTECTED]]
Sent: July 5, 2000 5:25 AM
To: [EMAIL PROTECTED]
Subject: [expert] Remote Access of Root


I have Mandrake 7.1 up and running and for maintenance purposes I want to
log on remotely as root for telnet and ftp from another system.

Right now this seems to be defeated by the system. Can I change this?